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(57) A reproducing apparatus for reproducing data 
from a record medium having a program area and a 
management area, the program area being used for re- 
cording a plurality of files, the management area being 
used for managing forging prohibition information 
against a particular file recorded in the program area is 
disclosed, the apparatus comprising a calculating 
means for calculating the forging prohibition information 
managed in the management area of the record medium 
whenever a file recorded in the recorde medium is re- 



produced, a comparing means for comparing a value 
calculated by the calculating means corresponding to a 
former reproduction command with a value calculated 
by the calculating means corresponding to a current re- 
production command, and a controlling means for per- 
mitting the file cor responding to the current reproduction 
command to be reproduced when the value calculated 
corresponding to the former reproduction command is 
the same as the value calculated corresponding to the 
current reproduction command as the result of the com- 
paring means. 
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Description 

[0001] The present invention relates to a reproducing apparatus and a reproducing method, tor example (though not 
exclusively) tor checking forged information of a file recorded in a detachable memory card. 
5 [0002] EEPROM (Electrically Erasable Programmable ROM) that is an electrically rewritable memory requires a 
large space because each bit is composed of two transistors. Thus, the integration of EEPROM is restricted. To solve 
this problem, a flash memory that allows one bit to be accomplished with one transistor using all-bit-erase system has 
been developed. The flash memory is being expected as a successor of conventbnal record mediums such as magnetic 
disks and optical discs. 

10 [0003] A memory card using a flash memory is also known. The memory card can be freely attached to an apparatus 
and detached therefrom. A digital audio recording/reproducing apparatus that uses a memory card instead of a con- 
ventional CD (Compact Disc: Trademark) or MD (Mini Disc: Trademark) can be accomplished. 
[0004] On the other hand, as audio/video information is digitized and used for multi-media, the copyright protection 
thereof is becoming important. In the field of information services, the user will be provided with a record medium on 

15. which digitized audio/video information having particular reproduction limitation information has been recorded. In ad- 
dition, digitized audio/video information having particular reproduction limitation information will be circulated to the 
• user through digital broadcast and Internet. The user can reproduce provided or circulated audio/video information 
(contents) lor the duration or the number of times represented by the reproduction limitation information. When nec- 
essary, the user can record desired audio/video information to a memory card at a predetermined cost. 

20 _ [0005] Although a file containing reproduction limitation information is easily recorded and stored, if the reproduction 
limitation information is forged with a particular means, the reproducing side cannot detect the forged reproduction 
limitation information. As a simple method for detecting forged reproduction limitation information, CRC (Cyclic Re- 
dundancy Check) and a value obtained therewith can be used. However, after reproduction limitation information has 
been forged, if CRC is forged, the forged reproduction limitation information cannot be detected. 

25 [0006] Various respective aspects and features of the invention are defined in the appended claims. 

[0007] Embodiments of the present invention can provide a reproducing apparatus and a reproducing method that 
allow forged reproduction limitation information to be securely detected and contents to be prevented from being re- 
produced. 

[0008] A first aspect of the present invention is a reproducing apparatus for reproducing data from a record medium 
30 having a program area and a management area, the program area being used for recording a plurality of files, the 
management area being used for managing forging prohibition information against a particular file recorded in the 
program area, the apparatus comprising a calculating means for calculating the forging prohibition information managed 
in the management area of the record medium whenever a file recorded in the recorde medium is reproduced, a 
comparing means for comparing a value calculated by the calculating means corresponding to a former reproduction 
35 command with a value calculated by the calculating means corresponding to a current reproduction command, and a 
controlling means for permitting the file corresponding to the current reproduction command to be reproduced when 
the value calculated corresponding to the former reproduction command is the same as the value calculated corre- 
sponding to the current reproduction command as the result of the comparing means. 

[0009] A second aspect of the present invention is a reproducing apparatus for reproducing a file from a record 
40 medium on which a main file and a reproduction management file are recorded, the main file having an attribute header 
for managing forging prohibition information, the reproduction management file being used for managing at least clock 
information, the apparatus comprising a calculating means for calculating the forging prohibition information managed 
in a management area of the record medium using a predetermined function whenever the main file recorded on the 
record medium is reproduced and for calculating the clock information using the predetermined function whenever the 
45 clock information is updated, a first comparing means for comparing a value calculated by the calculating means cor- 
responding to a former reproduction command with that corresponding to a current reproduction command, a second 
comparing means for comparing a value calculated by the calculating means corresponding to former clock information 
with a value calculated by the calculating means corresponding to current clock information, and a controlling means 
for permitting the main file to be reproduced when the value calculated corresponding to the former reproduction com- 
so mand is the same as that corresponding to the current reproduction command as the result of the first comparing 
means or when the value calculated corresponding to the former clock information is the same s that corresponding 
to the current clock information as the result of the second comparing means. 

[0010] In this case, when the number of reproduction times CT of the track is zero (namely, CT = 0) and the number 
of reproduction permission times MT is a predetermined value (namely, MT is any positive integer larger than zero), it 
55 is determined that the reproducing operation is performed the number of reproduction permission times. Thus, the 
reproducing operation of the track is prohibited. 

[0011] The invention will now be described by way of example with reference to the accompanying drawings, through- 
out which like parts are referred to by like references, and in which: 
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Fig. 1 is a block diagram showing the structure of a digital audio player using a nonvolatile memory card according 
to the present invention; 

Fig. 2 is a block diagram showing the internal structure of a DSP 30 according to the present invention; 
Fig. 3 is a block diagram showing the internal structure of a memory card 40 according to the present invention; 
s Fig. 4 is a schematic diagram showing a file management structure of a memory card as a storage medium ac- 

cording to the present invention; 

Fig. 5 is a schematic diagram showing the physical structure of data in a flash memory 42 of the memory card 40 
according to the present invention; 

Fig. 6 is a data structure of the memory card 40 according to the present invention; 
10 Fig. 7 is a schematic diagram showing the hierarchy of the file structure in the memory card 40; 

Fig. 8 is a schematic diagram showing the data structure of a reproduction management file PBLIST.MSF that is 
a sub directory stored in the memory card 40; 

Fig. 9 is a schematic diagram showing the data structure in the case that one ATRAC3 data file is divided into 

blocks with a predetermined unit length and that attribute files are added thereto; 
is Fig. 1 0A is a schematic diagram showing the file structure before two files are edited with a combining process; 

Fig. 1 0B is a schematic diagram showing the tile structure after two files are edited with a combining process; 

Fig. IOC is a schematic diagram showing the file structure after one file is edited with a dividing process; 

Fig. 11 is a schematic diagram showing the data structure of a reproduction management file PBLIST; 

Fig. 12A is a schematic diagram showing the data structure of a header portion of the reproduction management 
20 file PBLIST; 

Fig. 1 2B is a schematic diagram showing the data structure of a main data portion of the reproduction management 
file PBLIST; 

Fig. 12C is a schematic diagram showing the data structure of an additional information data portion of the repro- 
duction management file PBLIST; 
25 Fig. 13 is a table that correlates showing types of additional information data and code values thereof; 

Fig. 14 is a table that correlates types of additional information data and code values thereof; 
Fig. 15 is a table that correlates types of additional information data and code values thereof; 
Fig. 16A is a schematic diagram showing the data structure of additional information data; 

Fig. 16B is a schematic diagram showing the data structure in the case that additional information data is an artist 
30 name; 

Fig. 1 6C is a schematic diagram showing the data structure in the case that additional information data is a copyright 
code; 

Fig. 16D is a schematic diagram showing the data structure in the case that additional information data is date/ 
time information; 

35 Fig. 16E is a schematic diagram showing the data structure in the case that additional information data is a repro- 

duction log; 

Fig. 17 is a schematic diagram showing a detailed data structure of an ATRAC3 data file; 

Fig. 18 is a schematic diagram showing the data structure of an upper portion of an attribute header that composes 
an ATRAC3 data file; 

40 Fig. 1 9 is a schematic diagram showing the data structure of a middle portion of the attribute header that composes 

an ATRAC3 data file; 

Fig. 20 is a table that correlates record modes, record time, and so forth; 
Fig. 21 is a table showing copy control states; 

Fig. 22 is a schematic diagram showing the data structure of a lower portion of the attribute header that composes 
45 an ATRAC 3 data file; 

Fig. 23 is a schematic diagram showing the data structure of a header of a data block of an ATRAC3 data file; 
Figs. 24A to 24C are flow charts showing a recovering method according to the present invention in the case that 
an FTA area was destroyed; 

Fig. 25 is a schematic diagram showing the file structure in the memory card 40 according to a second embodiment 
so of the present invention; 

Fig. 26 is a schematic diagram showing the relation between a track information management file TRKLISTMSF 
and an ATRAC 3 data file A3Dnnnnn.MSA; 

Fig. 27 is a schematic diagram showing the detailed data structure of the track information management file TRK- 
LISTMSF; 

55 Fig. 28 is a schematic diagram showing the detailed data structure of NAME1 for managing a name; 

Fig. 29 is a schematic diagram showing the detailed data structure of NAME2 for managing a name; 

Fig. 30 is a schematic diagram showing the detailed data structure of an ATRAC3 data file A3Dnnnnn.MSA; 

Fig. 31 is a schematic diagram showing the detailed data structure of INFLISTMSF that represents additional 
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information; 

Fig. 32 is a schematic diagram showing the detailed data structure of INFLIST.MSF that represents additional 
information data; 

Fig. 33 is a flow chart showing a recovering method according to the second embodiment of the present invention 
s jn the case that an FAT area was destroyed; 

Fig. 34 is a block diagram showing a forge-checking circuit according to the present invention; 

Fig. 35 is a flow chart showing a forging protection checking process according to the first embodiment of the 

present invention; and 

Fig. 36 is a flow chart showing a forging protection checking process according to the second embodiment of the 
io present invention. 

[001 2] Next, an embodiment of the present invention will be described. Fig. 1 is a block diagram showing the structure 
of a digital audio recorder/player using a memory card according to an embodiment of the present invention. The digital 
audio recorder/player records and reproduces a digital audio signal using a detachable memory card. In reality, the 

1§ recorder/player composes an audio system along with an amplifying unit, a speaker, a CD player, an MD recorder, a 
tuner, and so lorth. However, it should be noted that the present invention can be applied to other audio recorders. In 
• other words, the present invention can be applied to a portable recording/reproducing apparatus. In addition, the present 
invention can be applied to a set top box that records a digital audio data that is circulated as a satellite data commu- 
nication; a digital broadcast, or Internet. Moreover, the present invention can be applied to a system that records/ 

20 _ reproduces moving picture data and still picture data rather than audio data. The system according to the embodiment 
of the present invention can record and reproduce additional information such as picture and text other than a digital 
audio signal. 

[0013] The recording/reproducing apparatus has an audio encoder/decoder IC 10, a security IC 20, a DSP (Digital 
Signal Processor) 30. Each of these devices is composed of a one-chip IC. The recording/reproducing apparatus has 

25 a detachable memory card 40. The one-chip IC of the memory card 40 has flash memory (nonvolatile memory), a 
memory control block, and a security block. The security block has a DES (Data Encryption Standard) encrypting 
circuit. According to the embodiment, the recording/reproducing apparatus may use a microcomputer instead of the 
DSP 30. The audio encoder/decoder IC 10 has an audio interface 11 and an encoder/decoder block 12. The encoder/ 
decoder block 12 encodes a digital audio data corresponding to a highly efficient encoding method and writes the 

30 encoded data to the memory card 40. In addition, the encoder/decoder block 12 decodes encoded data that is read 
from the memory card 40. As the highly efficient encoding method, the ATBAC3 format that is a modification of the 
ATRAC (Adaptive Transform Acoustic Coding) format used in Mini-Disc is used. 

[0014] In the ATRAC3 format, audio data sampled at 44.1 kHz and quantized with 16bits is highly efficiently encoded. 
In the ATRAC3 format, the minimum data unit of audio data that is processed is a sound unit (SU). 1 SU is data of 

35 which data of 1024 samples (1024 x 16 bits x 2 channels) is compressed to data of several hundred bytes. The duration 
of 1 SU is around 23 msec. In the highly efficient encoding method, the data amount of audio data is compressed to 
data that is around 10 times smaller than that of original data. As with the ATRAC 1 format used in Mini-Disc, the audio 
signal compressed and decompressed corresponding to the ATRAC3 format less deteriorates in the audio quality. 
[0015] A line input selector 13 selectively supplies the reproduction output signal of an MD, the output signal of a 

40 tuner, or a reproduction output signal of a tape to an A/D converter 14. The A/D converter 14 converts the input line 
signal to a digital audio signal (sampling frequency = 44.1 kHz; the number of quantizing bits = 16). A digital input 
selector 16 selectively supplies a digital output signal of an MD, a CD, or a CS (Satellite Digital Broadcast) to a digital 
input receiver 17. The digital input signal is transmitted through for example an optical cable. An output signal of the 
digital input receiver 1 7 is supplied to a sampling rale converter 1 5. The sampling rate converter 1 5 converts the digital 

45 input signal into a digital audio signal (sampling frequency = 44.1 kHz; the number of quantizing bits = 16). 

[0016] The encoder/decoder block 12 of the audio encoder/decoder IC 10 supplies encoded data to a DES encrypting 
circuit 22 through an interface 21 of the security IC 20. The DES encrypting circuit 22 has a Fl FO 23. The DES encrypting 
circuit 22 is disposed so as to protect the copyright of contents. The memory card 40 also has a DES encrypting circuit. 
The DES encrypting circuit 22 of the recording/reproducing apparatus has a plurality of master keys and an apparatus- 

50 unique storage key. The DES encrypting circuit 22 also has a random number generating circuit. The DES encrypting 
circuit 22 can share an authenticating process and a session key with the memory card 40 that has the DES encrypting 
circuit. In addition, the DES encrypting circuit 22 can re-encrypt data with the storage key of the DES encrypting circuit. 
[0017] The encrypted audio data that is output from the DES encrypting circuit 22 is supplied to a DSP (Digital Signal 
Processor) 30. The DSP 30 communicates with the memory card 40 through an interface. In this example, the memory 

55 card 40 is attached to an attaching/detaching mechanism (not shown) of the recording/reproducing apparatus. The 
DSP 30 writes the encrypted data to the flash memory of the memory card 40. The encrypted data is serially transmitted 
between the DSP 30 and the memory card 40. In addition, an external SRAM (Static Random Access Memory) 31 is 
connected to the DSP 30. The SRAM 31 provides the recording/reproducing apparatus with a sufficient storage capacity 
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so as to control the memory card 40. 

[0018] A bus interlace 32 is connected to the DSP 30. Data is supplied from an external controller (not shown) to 
the DSP 30 through a bus 33. The external controller controls all operations of the audio system. The external controller 
supplies data such as a record command or a reproduction command that is generated corresponding to a user's 

5 operation through an operation portion to the DSP 30 through the bus interlace 32. In addition, the external controller 
supplies additional information such as image information and character information to the DSP 30 through the bus 
interface 32. The bus 33 is a bidirectional communication path. Additional information that is read from the memory 
card 40 is supplied to the external controller through the DSP 30, the bus interface 32, and the bus 33. In reality, the 
external controller is disposed in for example an amplifying unit of the audio system. In addition, the external controller 

10 causes a display portion to display additional information, the operation state of the recorder, and so forth. The display 
portion is shared by the audio system. Since data that is exchanged through the bus 33 is not copyright protected data, 
it is not encrypted. 

[0019] The encrypted audio data that is read from the memory card 40 by the DSP 30 is decrypted by the security 
IC 20. The audio encoder/decoder IC 1 0 decodes the encoded data corresponding to the ATRAC3 format. Output data 

is? of the audio encoder/decoder 10 is supplied to a D/A converter 18. The D/A converter 18 converts the output data of 
the audio encoder/decoder 1 0 into an analog signal. The analog audb signal is supplied to a line output terminal 1 9. 
■[0020] The analog audio signal is supplied to an amplifying unit (not shown) through the line output terminal 1 9. The 
analog audio signal is reproduced from a speaker or a head set. The external controller supplies a muting signal to 
the D/A converter 18. When the muting signal represents a mute-on state, the external controller prohibits the audio 

20 - signal from being output from the line output terminal 19. 

[0021] Fig. 2 is a block diagram showing the internal structure of the DSP 30. Referring to Fig. 2, the DSP 30 com- 
prises a core 34, a flash memory 35, an SRAM 36, a bus interface 37, a memory card interface 38, and inter-bus 
bridges. The DSP 30 has the same function as a microcomputer. The core 34 is equivalent to a CPU. The flash memory 
35 stores a program that causes the DSP 30 to perform predetermined processes. The SRAM 36 and the external 

25 SRAM 31 are used as a RAM of the recording/reproducing apparatus. 

[0022] The DSP 30 controls a writing process for writing encrypted audio data and additional information to the 
memory card 40 corresponding to an operation signal such as a record command received through the bus interfaces 
32 and 37 and a reading process for reading them therefrom. In other words, the DSP 30 is disposed between the 
application software side of the audio system that records/reproduces audio data and additional information and the 

30 memory card 40. The DSP 30 is operated when the memory card 40 is accessed. In addition, the DSP 30 is operated 
corresponding to software such as a file system. 

[0023] The DSP 30 manages files stored in the memory card 40 with the FAT system used in conventional personal 
computers. In addition to the file system, according to the embodiment of the present invention, a management file is 
used. The management file will be descried later. The management file is used to manage data files stored in the 

35 memory card 40. The management file as the first file management information is used to manage audio data files. 
On the other hand, the FAT as the second file management information is used to mange all files including audio data 
files and management files stored in the flash memory of the memory card 40. The management file is stored in the 
memory card 40. The FAT is written to the flash memory along with the route directory and so forth before the memory 
card 40 is shipped. The details of the FAT will be described later. 

40 [0024] According to the embodiment of the present invention, to protect the copyright ol data, audio data that has 
been compressed corresponding to the ATRAC 3 format is encrypted. On the other hand, since it is not necessary to 
protect the copyright of the management file, it is not encrypted. There are two types of memory cards that are an 
encryption type and a non-encryption type. However a memory card for use with the recorder/player that records 
copyright protected data is limited to the encryption type. 

45 [0025] Voice data and image data that are recorded by users are recorded on non-encryption type memory cards. 
[0026] Fig. 3 is a block diagram showing the internal structure of the memory card 40. The memory card 40 comprises 
a control block 41 and a flash memory 42 that are structured as a one-chip IC. A bidirectional serial interface is disposed 
between the DSP 30 of the recorder/player and the memory card 40. The bidirectional serial interface is composed of 
ten lines that are a clock line SCK for transmitting a clock signal that is transmitted along with data, a status line SBS 

so for transmitting a signal that represents a status, a data line DIO for transmitting data, an interrupt line INT, two GND 
lines, two INT lines, and two reserved lines. 

[0027] The clock line SCK is used for transmitting a clock signal in synchronization with data. The status line SBS 
is used for transmitting a signal that represents the status of the memory card 40. The data line DIO is used for inputting 
and outputting a command and encrypted audio data. The interrupt line INT is used for transmitting an interrupt signal 
55 that causes the memory card 40 to interrupt the DSP 30 of the recorder/player. When the memory card 40 is attached 
to the recorder/player, the memory card 40 generates the interrupt signal. However, according to the embodiment of 
the present invention, since the interrupt signal is transmitted through the data line DIO, the interrupt line INT is ground- 
ed. 
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[0028] A serial/parallel converting, parallel/serial converting, and interface block (S/P, P/S, l/F block) 43 is an interface 
disposed between the DSP 30 of the recorder/player and the control block 41 of the memory card 40. The S/P, P/S, 
and IF block 43 converts serial data received from the DSP 30 of the recorder/player into parallel data and supplies 
the parallel data to the control block 41. In addition, the S/P, P/S, and IF block 43 converts parallel data received from 
s the control block 41 into serial data and supplies the serial data to the DSP 30. When the S/P, P/S, and IF block 43 
receives a command and data through the data line DIO, the S/P, P/S, and IF block 43 separates them into these that 
are normally accessed to the flash memory 42 and those that are encrypted, 

[0029] In the format of which data is transmitted through the data line DIO, after a command is transmitted, data is 
transmitted. The S/P, P/S, and IF block 43 detects the code of a command and determines whether the command and 

to data are those that are normally accessed or those that are encoded. Corresponding to the determined result, the S/ 
P, P/S, and IF block 43 stores a command that is normally accessed to a command register 44 and stores data that is 
normally accessed to a page buffer 45 and a write register 46. In association with the write register 46, the memory 
card 40 has an error correction code encoding circuit 47. The error correction code encoding circuit 47 generates a 
redundant code that is an error correction code for data temporarily stored in the page buffer 45. 

*s [0030] Output data of the command register 44, the page buffer 45, the write register 46, and the error correction 
code encoding circuit 47 is supplied to a flash memory interface and sequencer (hereinafter, referred to as memory I/ 
- F and sequencer) 51. The memory IF and sequencer 51 is an interface disposed between the control block 41 and 
the flash memory 42 and controls data exchanged therebetween. Data is written to the flash memory through the 
memory IF and sequencer 51 . 

20 _ [0031] Audio data that has been compressed corresponding to the ATRAC3 format and written to the flash memory 
(hereinafter, this audio data is referred to as ATRAC3 data) is encrypted by the security IC 20 of the recorder/player 
and the security block 52 of the memory card 40 so as to protect the copyright of the ATRAC3 data; The security block 
52 comprises a buffer memory 53, a DES encrypting circuit 54, and a nonvolatile memory 55. 

[0032] The security block 52 of the memory card 40 has a plurality of authentication keys and a unique storage key 
25 for each memory card. The nonvolatile memory 55 stores a key necessary for encrypting data. The key stored in the 
nonvolatile memory 55 cannot be analyzed. According to the embodiment, for example, a storage key is stored in the 
nonvolatile memory 55. The security block 52 also has a random number generating circuit. The security block 52 
authenticates an applicable recorder/player and shares a session key therewith. In addition, the security block 52 re- 
encrypts contents with the storage key through the DSE encrypting circuit 54. 
30 [0033] For example, when the memory card 40 is attached to the recorder/player, they are mutually authenticated. 
The security IC 20 of the recorder/player and the security block 52 of the memory card 40 mutually authenticate. When 
the recorder/player has authenticated the attached memory card 40 as an applicable memory card and the memory 
card 40 has authenticated the recorder/player as an applicable recorder/player, they are mutually authenticated. After 
the mutual authenticating process has been successfully performed, the recorder/player and the memory card 40 
35 generate respective session keys and share them with each other. Whenever the recorder/player and the memory card 
40 authenticate each other, they generate respective session keys. 

[0034] When contents are written to the memory card 40, the recorder/player encrypts a contents key with a session 
key and supplies the encrypted data to the memory card 40. The memory card 40 decrypts the contents key with the 
session key, re-encrypts the contents key with a storage key, and supplies the contents key to the recorder/player. The 
40 storage key is a unique key for each memory card 40. When the recorder/player receives the encrypted contents key, 
the recorder/player performs a formatting process for the encrypted contents key, and writes the encrypted contents 
key and the encrypted contents to the memory card 40. 

[0035] In the above section, the writing process for the memory card 40 was described. In the following, the reading 
process for the memory card 40 will be described. Data that is read from the flash memory 42 is supplied to the page 
45 buffer 45, the read register 48, and the error correction circuit 49 through the memory IF and the sequencer 51 . The 
error correcting circuit 49 corrects an error o1 the data stored in the page buffer 45. Output data of the page buffer 45 
that has been error-corrected and the output data of the read register 48 are supplied to the S/P, P/S, and IF block 43. 
The output data of the S/P, P/S, and IF block 43 is supplied to the DSP 30 of the recorder/player through the above- 
described serial interface. 

so [0036] When data is read from the memory card 40, the contents key encrypted with the storage key and the contents 
encrypted with the block key are read from the flash memory 42. The security block 52 decrypts the contents key with 
the storage key. The security block 52 re-encrypts the decrypted content key with the session key and transmits the 
re-encrypted contents key to the recorder/player. The recorder/player decrypts the contents key with the received 
session key and generates a block key with the decrypted contents key. The recorder/player successively decrypts 

ss the encrypted ATRAC 3 data. 

[0037] A config. ROM 50 is a memory that stores partition information, various types of attribute information, and so 
forth of the memory card 40. The memory card 40 also has an erase protection switch 60. When the switch 60 is in 
the erase protection position, even if a command that causes the memory card 40 to erase data stored in the flash 
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memory 42 is supplied from the recorder/player side to the memory card 40, the memory card 40 is prohibited from 
erasing the data stored in the flash memory 42. An OSC cont. 61 is an oscillator that generates a clock signal that is 
the reference of the timing of the process of the memory card 40. 

[0038] Fig. 4 is a schematic diagram showing the hierarchy of the processes of the file system of the computer system 

5 that uses a memory card as a storage medium. On the hierarchy, the top hierarchical level is an application process 
layer. The application process layer is followed by a file management process layer, a logical address management 
layer a physical address management layer, and a flash memory access layer. In the above-mentioned hierarchical 
structure, the file management process layer is the FAT file system. Physical addresses are assigned to individual 
blocks of the flash memory. The relation between the blocks of the flash memory and the physical addresses thereof 

10 does not vary. Logical addresses arc addresses that are logically handled on the file management process layer. 

[0039] Fig. 5 is a schematic diagram showing the physical structure of data handled in the flash memory 42 of the 
- memory card 40. In the memory 42 a data unit (referred to as segment) is divided into a predetermined number of 
blocks (fixed length). One block is divided into a predetermined number of pages (fixed length). In the flash memory, 
data is erased as each block at a time Data is written to the flash memory 42 or read therefrom as a page at a time. 

is? The size of each block is the same Likewise, the size of each page is the same. One block is composed of page 0 to 
page m. For example, one block has a storage capacity of for example 8 KB (kilobytes) or 16 KB. One page has a 
'storage capacity of 512 B (bytes) When one block has a storage capacity of 8 KB, the total storage capacity of the 
flash memory 42 is 4 MB' (512 blocks) or 8 MB (1024 blocks). When one block has a storage capacity of 16 KB, the 
total storage capacity of the flash memory 42 is 16 MB (1024 blocks), 32 MB (2048 blocks), or 64 MB (4096 blocks). 

20 - [0040] One page is composed ol a data portion of 512 bytes and a redundant portion of 16 bytes. The first three 
bytes of the redundant portion is an ovui wiite portion that is rewritten whenever data is updated. The first three bytes 
successively contain a block status area a page status area, and an update status area. The remaining 13 bytes of 
the redundant portion are fixed data that depends on the contents of the data portion. The 13 bytes contain a man- 
agement flag area (1 byte), a logical address area (2 bytes), a format reserve area (5 bytes), a dispersion information 

2S ECC area (2 bytes), and a data ECC arc.i (3 bytes). The dispersion information ECC area contains redundant data 
for an error correction process agamsi the management flag area, the logical address area, and the format reserve 
area. The data ECC area contains red jndanl data for an error correction process against 512-byte data. 
[0041] The management flag area contains a system flag (1 : user block, 0: boot block), a conversion table flag (1 : 
invalid, 0: table block), a copy prohibition 'lag (1; OK, 0: NG), and an access permission flag (1: free. 0: read protect). 

30 [0042] The first two blocks - blocks 0 and 1 are boot blocks. The block 1 is a backup of the block 0. The boot blocks 
are top blocks that are valid in the memory card. When the memory card is attached to the recorder/)player, the boot 
blocks are accessed at first. The rem* mrg blocks are user blocks. Page 0 of the boot block contains a header area, 
a system entry area, and a boot and attribute information area. Page 1 of the boot block contains a prohibited block 
data area. Page 2 of the boot block contains a CIS (Card Information Structure)/! Dl (identify Drive Information) area. 

35 [0043] The header area of the boot block contains a boot block ID and the number of effective entries. The system 
entries are the start position of prohibited block data, the data size thereof , the data type thereof, the data start position 
of the CIS/IDI area, the data size thereof and the data type thereof. The boot and attribute information contains the 
memory card type (read only type, rewritable type, or hybrid type), the block size, the number of blocks, the number 
of total blocks, the security/ndn-secunty type the card fabrication data (date of fabrication), and so forth. 

40 [0044] Since the flash memory has a restriction for the number of rewrite times due to the deterioration of the insulation 
film, it is necessary to prevent the same storage area (block) from being concentratedly accessed. Thus, when data 
at a particular logical address stored hi a particular physical address is rewritten, updated data of a particular block is 
written to a non-used block rather than the original block. Thus, after data is updated, the relation between the logical 
address and the physical address changes This process is referred to as swap process. Consequently, the same block 

45 j S prevented from being concentratedly accessed. Thus, the service life of the flash memory can be prolonged. 

[0045] The logical address associates with data written to the block. Even if the block of the original data is different 
from the block of updated data, the address on the FAT does not change. Thus, the same data can be properly accessed. 
However, since the swap process is pcrtonned, a conversion table that correlates logical addresses and physical 
addresses is required (this table is lukmud to as logical-physical address conversion table). With reference to the 

so logical-physical address conversion tabic a physical address corresponding to a logical address designated on the 
FAT is obtained. Thus, a block designated with a physical address can be accessed. 

[0046] The DSP 30 stores the logical physical address conversion table in the SRAM. When the storage capacity 
of the RAM is small, the logical-phyoic.il address conversion table can be stored to the flash memory. The logical- 
physical address conversion table co* toialos logical addresses (2 bytes) sorted in the ascending order with physical 
55 addresses (2 bytes). Since the maximum storage capacity of the flash memory is 1 28 MB (81 92 blocks), 81 92 addresses 
can be assigned with two bytes. The logical-physical address conversion table is managed for each segment. Thus, 
the size of the logical-physical addro<^ conversion table is proportional to the storage capacity of the flash memory. 
When the storage capacity of the flast- momory is 8 MB (two segments), two pages are used as the logical-physical 
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address conversion table tor each of the segments. When the conversion table is stored in the flash memory, a pre- 
determined one bit of the management flag area in the redundant portion in each page represents whether or not the 
current block is a block containing the logical-physical address conversion table. 

[0047] The above-described memory card can be used with the FAT file system of a personal computer system as 

5 with the disc shaped record medium. The flash memory has an IPL area, a FAT area, and a route directory area (not 
shown in Fig. 5). The IPL area contains the address of a program to be initially loaded to the memory of the recorder/ 
player. In addition, the IPL area contains various types of memory information. The FAT area contains information with 
respect to blocks (clusters). The FAT has defined unused blocks, next block number, defective blocks, and last block 
number. The route directory area contains directory entries that are a file attribute, an update date [day, month, year], 

io file size, and so forth. 

[0048] Next, with reference to Fig. 6, a managing method using the FAT table will be described, 
w [0049] Fig. 6 is a schematic diagram showing a memory map. the top area of the memory map is a partition table 
portion. The partition table portion is followed by a block area, a boot sector, a FAT area, a FAT backup area, a root 
directory area, a sub directory area, and a data area. On the memory map, logical addresses have been converted 

is. into physical addresses corresponding to the logical-physical address conversion table. 

[0050] The boot sector, the FAT area, the FAT backup area, the root directory area, the sub directory area, and the 
• data area are referred to as FAT partition area. 
[0051] The partition table portion contains the start address and the end address of the FAT partition area. 
[0052] The FAT used for a conventional floppy disk does not have such a partition table. Since the first track has 

20 only a partition table, there is a blank area. The boot sector contains the size of the FAT structure (12 bit FAT or 16 bit 
FAT), the cluster size, and the size of each area. The FAT is used to manage the position of a file recorded in the data 
area. The FAT copy area is a FAT backup area. The route directory area contains file names, start cluster addresses 
thereof, and various attributes thereof. The route directory area uses 32 bytes per file. 

[0053] The sub directory area is achieved by a directory attribute file as a directory. In the embodiment shown in Fig. 

2S 6, the sub directory area has four files named PBLISTMSF, CAT.MSF, DOG.MSF, and MAN.MFA. The sub directory 
area is used to manage file names and record positions on the FAT. In other words, the slot of the file name CAT.MSF 
is assigned address M 10 n on the FAT. The slot of the file name DOG.MSF is assigned address "IO" on the FAT. An area 
after cluster 2 is used as a data area. In this embodiment, audio data that has been compressed corresponding to the 
ATRAC3 format is recorded. The top slot of the file name MAN. MSA is assigned address "11 0" on the FAT According 

30 to the embodiment of the present invention, audio data with the file name CAT.MSF is recorded to cluster 5 to 8. Audio 
data of DOG-1 as the first half of the file with the file name DOG.MSF is recorded to clusters 10 to 12. Audio data DOG- 
2 as the second half of the file with the file name DOG.MSF is recorded in clusters 100 and 101. Audio data with the 
file name MAN.MSF is recorded in clusters 110 and 111. 

[0054] In the embodiment of the present invention, an example of which a single file is divided into two portions and 
35 dispersedly recorded is described. In the embodiment, an area "Empty" in the data area is a recordable area. An area 
after cluster 200 is used for managing file names. The file CAT.MSF is recorded to cluster 200. The file DOG.MSF is 
recorded to cluster 201 . The file MAN.MSF is recorded to cluster 202. When the positions of the files are changed, the 
area after cluster 200 is re-arranged. When the memory card is attached, the beginning and the end of the FAT partition 
area are recorded with reference to the top partition table portion. After the boot sector portion is reproduced, the root 
40 directory area and the sub directory area are reproduced. The slot ol the reproduction management information PBLIST 
MSF in the sub directory area is detected. Thus, the address of the end portion of the slot of the file PBLISTMSF is 
obtained. In the embodiment, since address "200" is recorded at the end of the file PBLISTMSF, cluster 200 is refer- 
enced. 

[0055] The area after cluster 200 is used for managing the reproduction order of files. In the embodiment, the file 
45 CAT. MSA is the first program. The file DOG. MSA is the second program. The file MAN. MSA is the third program. After 
the area after cluster 200 is referenced, slots of the files CAT MSA, DOG. MSA, and MAN. MSA are referenced. In Fig. 
6, the end of the slot of the file CAT. MSA is assigned address "5". The end of the slot of the file DOG. MSA is assigned 
address "10". The end of the slot of the file MAN. MSA is assigned address "110". When an entry address is searched 
on the FAT with address "5", cluster address "6" is obtained. When an entry address is searched on the FAT with 
so address "6", cluster address "7" is obtained. When an entry address is searched on the FAT with address "8", code 
"FFF" that represents the end is obtained. Thus, the file CAT. MSA uses clusters 5, 6,7, and 8. With reference to clusters 
5, 6, 7, and 8 in the data area, an area of ATRAC3 data with the file name CAT. MSA can be accessed. 
[0056] Next, a method for searching the file DOG.MSF that has been dispersedly recorded will be described. The 
end of the slot of the file DOG. MSA is assigned address "10°. When an entry address on the FAT is searched with 
55 address "10", cluster address "11" is obtained. When an entry address on the FAT is searched with address "11" is 
referenced: cluster address "12" is obtained. When an entry address on the FAT is searched with address °12° is 
referenced: cluster address "101" is obtained. When entry address "101" is referenced, code "FFF" that represents 
the end is obtained. Thus, the file DOG.MSF uses clusters 10, 11 , 12, 100, and 101. When clusters 10, 11, and 12 are 
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referenced the first part of ATRAC 3 data of the file DOG.MSF can be accessed. When the clusters 100 and 101 are 
referenced, the second part of ATRAC 3 data of the file DOG.MSF can be accessed. In addition, when an entry address 
is searched on the FAT with address °110°, cluster address "101 ' is obtained. When an entry address "111 " is searched 
on the FAT with address "101 B , code "FFF" that represents the end is obtained. Thus, it is clear that the file MAN. MSA 
5 uses clusters 1 1 0 and 1 1 1 . As described above, data files dispersed in the flash memory can be linked and sequentially 
reproduced. 

[0057] According to the embodiment of the present invention, in addition to the file management system defined in 
the format of the memory card 40, the management file is used for managing tracks and parts of music files. The 
management file is recorded to a user block of the flash memory 42 of the memory card 40. Thus, as will be described 

10 later, even if the FAT of the memory card 40 is destroyed, a file can be recovered. 

[0058] The management file is generated by the DSP 30. When the power of the recorder/player is turned on, the 
- DSP 30 determines whether or not the memory card 40 has been attached to the recorder/player. When the memory 
card has been attached, the DSP 30 authenticates the memory card 40. When the DSP 30 has successfully authen- 
ticated the memory card 40, the DSP 30 reads the boot block of the flash memory 42. Thus : the DSP 30 reads the 

is r physical-logical address conversion table and stores the read data to the SRAM. The FAT and the route directory have 
been written to the flash memory of the memory card 40 before the memory card 40 is shipped. When data is recorded 
"to the memory card 40, the management file is generated. 

[0059] In other words, a record command issued by the remote controller of the user or the like is supplied to the 
DSP 30 from the external controller through the bus and the bus interface 32. The encoder/decoder IC 10 compresses 

20 -the received audio data and supplies the resultant ATRAC 3 data to the security IC 20. The security IC 20 encrypts the 
ATRAC 3 data. The encrypted ATRAC 3 data is recorded to the flash memory 42 of the memory card 40. Thereafter, 
the FAT and the management file are updated. Whenever a file is updated (in reality, whenever the recording process 
of audio data is completed), the FAT and the management file stored in the SRAMs 31 and 36 are rewritten. When the 
memory card 40 is detached or the power of the recorder/player is turned off, the FAT and the management file that 

2S are finally supplied from the SRAMs 31 and 36 are recorded to the flash memory 42. Alternatively, whenever the 
recording process of audio data is completed, the FAT and the management file written in the flash memory 42 may 
be rewritten. When audio data is edited, the contents of the management file are updated. 

[0060] In the data structure according to the embodiment, additional information is contained in the management 
file. The additional information is updated and recorded to the flash memory 42. In another data structure of the man- 

30 agement file, an additional information management file is generated besides the track management file. The additional 
information is supplied from the external controller to the DSP 30 through the bus and the bus interface 32. The addi- 
tional information is recorded to the flash memory 42 of the memory card 40. Since the additional information is not 
supplied to the security IC 20, it is not encrypted. When the memory card 40 is detached from the recorder/player or 
the power thereof is turned off, the additional information is written from the SRAM of the DSP 30 to the flash memory 42. 

35 [0061] Fig. 7 is a schematic diagram showing the file structure of the memory card 40. As the file structure, there 
are a still picture directory, a moving picture directory, a voice directory, a control directory, and a music (HIFI) directory. 
According to the embodiment, music programs are recorded and reproduced. Next, the music directory will be de- 
scribed. The music directory has two types of files. The first type is a reproduction management file BLIST.MSF (here- 
inafter, referred to as PBLIST). The other type is an ATRAC 3 data file A3Dnnnn.MSA that stores encrypted music data. 

40 The music directory can stores up to 400 ATRAC 3 data files (namely, 400 music programs). ATRAC 3 data files are 
registered to the reproduction management file and generated by the recorder/player. 

[0062] Fig. 8 is a schematic diagram showing the structure of the reproduction management file. Fig. 9 is a schematic 
diagram showing the file structure of one ATRAC 3 data file. The reproduction management file is a fixed-length file of 
16 KB. An ATRAC3 data file is composed of an attribute header and an encrypted music data area for each music 
45 program. The attribute data has a fixed length of 16 KB. The structure of the attribute header is similar to that of the 
reproduction management file. 

[0063] The reproduction management file shown in Fig. 8 is composed of a header, a memory card name NM-1S 
(for one byte code), a memory card name NM2-S (for two byte code), a program reproduction sequence table TRKTBL, 
and memory card additional information INF-S. The attribute header (shown in Fig. 9) at the beginning of the data file 
so is composed of a header, a program name NM1 (for one byte code), a program name NM2 (for two byte code), track 
information TRKINF (such as track key information), part information PRTINF, and track additional information INF. 
The header contains information of the number of total parts, the attribute of the name, the size of the additional 
information, and so forth. 

[0064] The attribute data is followed by ATRAC3 music data. The music data is block-segmented every 1 6 KB. Each 
ss block starts with a header. The header contains an initial value for decrypting encrypted data. Only music data of an 
ATRAC 3 data file is encrypted. Thus, other data such as the reproduction management file, the header, and so forth 
are not encrypted. 

[0065] Next, with reference to Figs. 10A to 10C, the relation between music programs and ATRAC 3 data files will 
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be described. One track is equivalent to one music program. In addition, one music program is composed of one 
ATRAC 3 data (see Fig. 9) . The ATRAC 3 data file is audio data that has been compressed corresponding to the ATRAC3 
format. The ATRAC3 data file is recorded as a cluster at a time to the memory card 40, One cluster has a capacity of 
16 KB. A plurality of files are not contained in one cluster. The minimum data erase unit of the flash memory 42 is one 
5 block. In the case of the memory card 40 for music data, a block is a synonym of a cluster. In addition, one cluster is 
equivalent to one sector 

[0066] One music program is basically composed of one part. However, when a music program is edited, one music 
program may be composed of a plurality of parts. A part is a unit of data that is successively recorded. Normally one 
track is composed of one part. The connection of parts of a music program is managed with part information PRTINF 

10 in the attribute header of each music program. In other words, the part size is represented with part size PRTSIZE (4 
bytes) of the part information PRTINF The first two bytes of the part size PRTSIZE represents the number of total 
clusters of the current part. The next two bytes represent the positions ol the start sound unit (SU) and the end sound 
unit (SU) of the beginning and last clusters, respectively. Hereinafter, a sound unit is abbreviated as SU. With such a 
part notation, when music data is edited, the movement of the music data can be suppressed. When music data is 

is edited for each block, although the movement thereof can be suppressed, the edit unit of a block is much larger than 
' the edit unit of a SU. 

[0067] SU is the minimum unit ot a part. In addition, SU is the minimum data unit in the case that audio data is 
compressed corresponding to the ATR AC3 format. 1 SU is audio data of which data of 1 024 samples at 44. 1 kHz (1 024 
x 16 bits x 2 channels) is compressed to data that is around 10 times smaller than that of original data. The duration 

20 of 1 SU is around 23 msec. Normally one pari is composed of several thousand SU. When one cluster is composed 
of 42 SU, one cluster allows a sound of one second to be generated. The number of parts composing one track depends 
on the size of the additional information Since the number of parts is obtained by subtracting the header, the program 
name, the additional data, and so forth Irom one block, when there is no additional information, the maximum number 
of parts (645 parts) can be used 

25 [0068] Fig. 1 0A is a schematic diagram showing the file structure in the case that two music programs of a CD or 
the like are successively recorded. The first program (file 1 ) is composed of for example five clusters. Since one cluster 
cannot contain two files of the first program and the second program, the file 2 starts from the beginning of the next 
cluster. Thus, the end of the part 1 corresponding to the file 1 is in the middle of one cluster and the remaining area of 
the cluster contains no data. Likewise thrs second music program (file 2) is composed of one part. In the case of the 

30 file 1, the part size is 5. The first cluster starts at 0-th SU. The last cluster ends at 4-th SU. 

[0069] There are four types of edit processes that are a divide process, a combine process, an erase process, and 
a move process. The divide process is performed to divide one track into two portions. When the divide process is 
performed, the number of total tracks increases by one. In the divide process, one file is divided into two files on the 
file system. Thus, in this case, the reproduction management file and the FAT are updated. The combine process is 

35 performed to combine two tracks into one track. When the combine process is performed, the number of total tracks 
decreases by one. In the combine process, two files are combined into one file on the file system. Thus, when the 
combine process is performed, the reproduction management file and the FAT are updated. The erase process is 
performed to erase a track. The track numbers after the track that has been erased decrease one by one. The move 
process is performed to change the track sequence. Thus, when the erase process or the move process is performed, 

40 the reproduction management file and the FAT are updated. 

[0070] Fig. 1 0B is a schematic diagram showing the combined result of two programs (file 1 and file 2) shown in Fig. 
10A. As a result of the combine process the combined file is composed of two parts. Fig. 10C is a schematic diagram 
showing the divided result of which one program (file 1) is divided in the middle of the cluster 2. By the divide process, 
the file 1 is composed of clusters 0, 1 and the beginning portion of cluster 2. The file 2 is composed of the end portion 

45 of cluster 2 and clusters 3 and 4. 

[0071] As described above, according to the embodiment of the present invention, since the part notation is defined, 
as the combined result (see Fig. 10B) the start position of the part 1, the end position of the part 1, and the end portion 
of the part 2 can be defined with SU Thus to pack the space due to the combined result, it is not necessary to move 
the music data of the part 2. In addition ns the divided result (see Fig. 1 0C), it is not necessary to move data and pack 

50 the space at the beginning of the file 2 

[0072] Fig. 11 is a schematic diagram showing the detailed data structure of the reproduction management file PB- 
LIST. Figs. 1 2A and 1 2B show a headci portion and the remaining portion of the reproduction management file PBLIST 
The size of the reproduction management hlc is one cluster (one block = 16 KB). The size of the header shown in Fig. 
12A is 32 bytes. The rest of the reproduction management file PBLIST shown in Fig. 12B contains a name NM1-S 

55 area (256 bytes) (for the memory card! h name NM2-S area (512 bytes), a contents key area, a MAC area, an S- 
YMDhms area, a reproduction sequence management table TRKTBL area (800 bytes), a memory card additional 
information INF-S area (14720 bytes) nnd a header information redundant area. The start positions of these areas 
are defined in the reproduction management file. 



10 



ID: <EP 1041573A2_I_> 



EP 1 041 573 A2 



[0073] The first 32 bytes of (0x0000) to (0x0010) shown in Fig. 12A are used for the header. In the file, 16-byte areas 
are referred to as slots. Referring to Fig. 1 2A, the header are placed in the first and second slots. The header contains 
the following areas. An area denoted by "Reserved" is an undefined area. Normally, in a reserved area, a null (0x00) 
is written. However, even if any data is written to a reserved area, the data written in the reserved is ignored In a future 
version, some reserved areas may be used. In addition, data is prohibited from being written to a reserved area. When 
an option area is not used : it is treated as a reserved area. 
= BLKID-TL0 (4 bytes) 

Meaning: BLOCKID FILE ID 

Function: Identifies the top of the reproduction management file. 
Value: Fixed value = "TL = 0" (for example, 0x544C2D30) 

= MCode (2 bytes) 

Meaning: MAKER CODE 

Function: Identities the maker and model of the recorder/player 
Value: High-order 10 bits (Maker code); low-order 6 bits (model code). 

= REVISION (4 bytes) 
Meaning: Number of rewrite times of PBLIST 

Function: Increments whenever the reproduction management file is rewritten. 
Value: Starts at 0 and increments by 1 . 

= S-YMDhms (4 bytes) (Option) 

Meaning: Year, month, day, hour, minute, and second recorded by the recorder/player with a reliable clock. 

Function: Identifies the last recorded date and time. 

Value 



bits 25 to 31 


Year 0 to 99 (1 980 to 2079) 


bits 21 to 24 


Month 0 to 12 


bits 16 to 20 


Day 0 to 31 


bits 11 to 15 


Hour 0 to 23 


bits 05 to 10 


Minute 0 to 59 


bits 00 to 04 


Second 0 to 29 (two bit interval) 



= SY1C+L(2bytes) 

Meaning: Attribute of name (one byte code) of memory card written in NM1-S area. 
Function: Represents the character code and the language code as one byte code. 
Value: Character code (C): High-order one byte 

00: Non-character code, binary number 

01: ASCII (American Standard Code for Information Interchange) 

02: ASCII+KANA 

03: Modified 8859-1 

81: MS-JIS 

82: KSC 5601 -1989 

83: GB (Great Britain) 2312-80 

90: S-JIS (Japanese Industrial Standards) (for Voice) 

Language code (L): Loworder one byte 

[0074] Identifies the language based on EBU Tech 3258 
standard. 
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00: Not set 
08: German 
09: English 
OA: Spanish 
OF: French 
15: Italian 
1D: Dutch 
65: Korean 
69: Japanese 
75: Chinese 

[0075] When data is not recorded, this area is all 0. 
= SN2C+L (2 bytes) 

Meaning: Attribute of name of memory card in NM2-S area. 

Function: Represents the character code and the language coded as one byte code. 
Value: Same as SN1 C+L 

= SINFSIZE (2 bytes) 

Meaning: Total size of additional information of memory card in INF-S area. 

Function: Represents the data size as an increment of 16 bytes. When data is not recorded, this area is all 0. 
Value: Size: 0x0001 to 0x39C (924) 

= T-TRK (2 bytes) 

Meaning: TOTAL TRACK NUMBER 

Function: Represents the number of total tracks. 

Value: 1 to 0x0190 (Max. 400 tracks) 

[0076] When data is recorded, this area is all 0. 
= VerNo (2 bytes) 

Meaning: Format version number 

Function: Represents the major version number (high order one byte) and the minor version number (low order 
one byte). 

Value: 0x0100 (Ver 1.0) 
0x0203 (Ver 2.3) 

[0077] Next, areas (see Fig. 1 3B) that preceded by the header will be described. 
= NM1-S 

Meaning: Name of memory card (as one byte code) 

Function: Represents the name of the memory card as one byte code (max. 256). At the end of this area, an end 
code (0x00) is written. The size is calculated from the end code. When data is not recorded, null (0x00) is recorded 
from the beginning (0x0020) of this area for at least one byte. 
Value: Various character code 

= NM2-S 

Meaning: Name of memory card (as two byte code) 

Function: Represents the name of the memory card as two byte code (max. 512). At the end of this area, an end 
code (0x00) is written. The size is calculated from the end code. When data is not recorded, null (0x00) is recorded 
from the beginning (0x01 20) of this area for at least two bytes. 
Value: Various character code 

= CONTENTS KEY 
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Meaning: Value for music program. Protected with MG(M) and stored. Same as CONTENTS KEY 
Function: Used as a key necessary for calculating MAC of S-YMDhms. 
Value: 0 to OxFFFFFFFFFFFFFFFF 

5 = MAC 

Meaning: Forged copyright information check value 

Function: Represents the value generated with S-YMDhms and CONTENTS KEY 
Value: 0 to OxFFFFFFFFFFFFFFFF 

10 

= TRK-nnn 

Meaning: SQN (sequence) number of ATRAC3 data file reproduced. 
Function: Represents FNo of TRKINF. 
is r Value: 1 to 400 (0x190) 

"[0078] When there is no track, this area is all 0. 
= INF-S 

20 - Meaning: Additional information of memory card (for example, information with respect to photos, songs, guides, 
etc.) 

Function: Represents variable length additional information with a header. A plurality of types of additional infor- 
mation may be used. Each of the types of additional information has an ID and a data size. Each additional infor- 
mation area including a header is composed of at least 16 bytes and a multiple of 4 bytes. For details, see the 
25 following section. 

Value: Refer to the section of "Data Structure of Additional Information". 

= S-YMDhms (4 bytes) (Option) 

30 Meaning: Year, month, day, hour, minute, and second recorded by the recorder/player with a reliable clock. 

Function: Identifies the last recorded date and time. In this case of EMD, this area is mandatory. 
Value: 



35 



bits 25 to 31 


Year 0 to 99 (1 980 to 2079) 


bits 21 to 24 


Month 0 to 12 


bits 16 to 24 


Day 0 to 31 


bits 11 to 15 


Hour 0 to 23 


bits 05 to 10 


Minute 0 to 59 


bits 00 to 04 


Second 0 to 29 (two second interval) 



[0079] As the last slot of the reproduction management file, the same BLKID-TL0, MCode, and REVISION as those 
in the header are written. 

[0080] While data is being recorded to a memory card, it may be mistakenly or accidentally detached or the power 
of the recorder/player may be turned off. When such an improper operation is performed, a defect should be detected. 
As described above, the REVISION area is placed at the beginning and end of each block. Whenever data is rewritten, 
the value of the REVISION area is incremented. If a defect termination takes place in the middle of a block, the value 
of the REVISION area at the beginning of the block does not match the value of the REVISION area at the end of the 
block. Thus, such a defect termination can be detected. Since there are two REVISION areas, the abnormal termination 
can be detected with a high probability. When an abnormal termination is detected, an alarm such as an error message 
is generated. 

[0081] In addition, since the fixed value BLKID-TL0 is written at the beginning of one block (16 KB), when the FAT 
is destroyed, the fixed value is used as a reference for recovering data. In other words, with reference to the fixed 
value, the type of the file can be determined. Since the fixed value BLKID-TL0 is redundantly written at the header and 
the end portion of each block, the reliability can be secured. Alternatively, the same reproduction management file can 
be redundantly recorded. 

[0082] The data amount of an ATRAC 3 data file is much larger than that of the track information management file. 
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In addition, as will be described later, a block number BLOCK SERIAL is added to ATRAC3 data file. However, since 
a plurality of ATRAC3 files are recorded to the memory card, to prevent them from become redundant, both CONNUM0 
and BLOCK SERIAL are used. Otherwise, when the FAT is destroyed, it will be difficult to recover the file. In other 
words, one ATRAC3 data file may be composed of a plurality of blocks that are dispersed. To identify blocks of the 
5 same file, CONNUMO is used. In addition, to identify the order of blocks in the ATRAC 3 data file, BLOCK SERIAL is used. 
[0083] Likewise, the maker code (Mcode) is redundantly recorded at the beginning and the end of each block so as 
to identify the maker and the model in such a case that a file has been improperly recorded in the state that the FAT 
has not been destroyed. 

[0084] Fig. 12C is a schematic diagram showing the structure of the additional information data. The additional in- 
10 formation is composed of the following header and variable length data. The header has the following areas. 
= INF 

Meaning: FIELD ID 

Function: Represents the beginning of the additional informatbn (fixed value). 
15 Value: 0x69 

= ID 

Meaning: Additional information key code 
20 Function: Represents the category of the additional information. 

Value: 0 to OxFF 

= SIZE 

25 Meaning: Size of individual additional informatbn 

Function: Represents the size of each type of additional information. Although the data size is not limited, it should 
be at least 16 bytes and a multiple of 4 bytes. The rest of the data should be filled with null (0x00). 
Value: 16 to 14784 (0x39C0) 

30 = MCode 

Meaning: MAKER CODE 

Function: Identifies the maker and model of the recorder/player. 

Value: High-order 10 bits (maker code), low-order 10 bits (machine code). 

35 

= C+L 

Meaning: Attribute of characters in data area starling from byte 12. 
Function: Represents the character code and the language code as one byte code. 
40 Value: Same as SNC+L 

= DATA 

Meaning: Individual additional information 
45 Function: Represents each type of additional information with variable length data. Real data always starts from 

byte 1 2. The length (size) of the real data should be at least 4 bytes and a multiple of 4 bytes. The rest of the data 
area should be filled with null (0x00). 

Value: Individually defined corresponding to the contents of each type of additional information. 

so [0085] Fig. 1 3 is a table that correlates key code values (0 to 63 of additional information and types thereof. Key 
code values (0 to 31) are assigned to music character information. Key code values (32 to 63) are assigned to URLs 
(Uniform Resource Locator) (web information). The music character information and URL information contain character 
information of the album title, the artist name, the CM, and so forth as additional information. 

[0086] Fig. 14 is a table that correlates key code values (64 to 127) of additional information and types thereof. Key 
55 code values (64 to 95) are assigned to paths/others. Key code values (96 to 1 27) are assigned to control/numeric data. 
For example, ID = 98 represents TOC-ID as additional information. TOC-ID represents the first music program number, 
the last music program number, the current program number, the total performance duration, and the current music 
program duration corresponding to the TOC information of a CD (Compact Disc). 
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[0087] Fig. 1 5 is a table that correlates key code values (1 28 to 159) of additional information and types thereof. Key 
code values (128 to 1 59) are assigned to synchronous reproduction information. In Fig. 15, EMD stands for electronic 
music distribution. 

[0088] Next, with reference to Figs. 16A to 16E, real examples of additional information will be described. As with 
5 Fig. 12C, Fig. 16A shows the data structure of the additional information. In Fig. 16B, key code ID = 3 (artist name as 

additional information). SIZE = 0x1 C (28 bytes) representing that the data length ol additional information including 

the header is 28 bytes; C+L representing that character code C = 0x01 (ASCII) and language code L = 0x09 (English). 

Variable length data after byte 12 represents one byte data "SIMON & GRAFUNKEL" as artist name. Since the data 

length of the additional information should be a multiple of 4 bytes, the rest is filled with (0x00). 
io [0089] In Fig. 16C, key code ID = 97, representing that ISRC (International Standard Recording Code: Copyright 

code) as additional information. SIZE = 0x14 (20 bytes) representing that the data length of the additional information 
* is 20 bytes. C = 0x00 and L = 0x00 representing that characters and language have not been set. Thus, the data is 

binary code. The variable length data is eight-byte ISRC code representing copyright information (nation, copyright 

owner, recorded year, and serial number). 
is- [0090] In Fig. 16D, key code ID =is 97 representing recorded date and time as additional information. SIZE = 0x10 

(16 bytes) representing that the data length of the additional information is 16 bytes. C = 0x00 and L = representing 

"that characters and language have not been set. The variable length data is four-byte code (32 bit) representing the 

recorded date and time (year, month, day, hour, minute, second). 

[0091] In Fig. 16E, key code ID = 107 representing a reproduction log as additional information. SIZE = 0x10 (16 
20 -bytes) representing that the data length of the additional information is 16 bytes. C = 0x00 and L = 0x00 representing 
that characters and language have not been set. The variable length data is a four-byte code representing a repro- 
duction log (year, month, day, hour, minute, second). When the recorder/player has a reproduction log function, it 
records data of 16 bytes whenever it reproduces music data. 

[0092] Fig. 17 is a schematic diagram showing a data arrangement of ATRAC3 data file A3Dnnnn in the case that 
25 1 SU is N bytes (for example, N = 384 bytes). Fig. 17 shows an attribute header (1 block) of a data file and a music 

data file (1 block). Fig. 17 shows the first byte (0x0000 to 0x7 FF0) of each slot of the two blocks (16 x 2 = 32 kbytes). 

As shown in Fig. 18, the first 32 bytes of the attribute header are used as a header; 256 bytes are used as a music 

program area NM1 (256 bytes); and 512 bytes are used as a music program title area NM2 (512 bytes). The header 

of the attribute header contains the following areas. 
30 = BLKID-HD0 (4 bytes) 

Meaning: BLOCKID FIELD ID 

Function: Identifies the top of an ATRA3 data file. 

Value: Fixed value = "HD = 0" (For example, 0x48442D30) 

35 

= MCode (2 bytes) 
Meaning: MAKER CODE 

Function: Identifies the maker and model of the recorder/player 
40 Value: High-order 10 bits (maker code); low-order 6 bits (machine code) 

= BLOCK SERIAL (4 bytes) 

Meaning: Track serial number 
45 Function: Starets from 0 and increments by 1 . Even if a music program is edited, this value does not vary. 

Value: 0 to OxFFFFFFFF. 

= N1C+L(2bytes) 

so Meaning: Represents the attribute of data (NM1 ) of a track (music program title). 

Function: Represent the character code and language code of NM1 as one byte code. 
Value: Same as SN1C+L 

= N2C+L (2 bytes) 

55 

Meaning: Represents the attribute of data (NM2) of a track (music program title). 
Function: Represent the character code and language code of NM1 as one byte code. 
Value: Same as SN1 C+L 



15 



EP 1 041 573 A2 



= INFSIZE (2 bytes) 
Meaning: Total size of additional information of current track. 

Function: Represents the data size as a multiple of 16 bytes. When data is not recorded, this area should be all 0/ 
s Value: 0x0000 to 0x3C6 (966) 

= T-PRT (2 bytes) 

Meaning: Number of total bytes 
10 Function: Represents the number of parts that composes the current track. Normally, the value of T-PRT is 1 . 

Value: 1 to 285 (645 dec). 

= T-SU (4 bytes) 

is Meaning: Number of total SU. 

Function: Represents the total number of SU in one track that is equivalent to the program performance duration. 
Value: 0x01 to 0x001 FFFFF 



20 



so 



ss 



= INX (2 bytes) (Option) 



Meaning: Relative position of INDEX 

Function: Used as a pointer that represents the top of a representative portion of a music program. The value of 
INX is designated with a value of which the number of SU is divided by 4 as the current position of the program. 
This value of INX is equivalent to 4 times larger than the number of SU (around 93 msec). 
25 Value: 0 to OxFFFF (max, around 6084 sec) 

= XT (2 bytes) (Option) 

Meaning: Reproduction duration of INDEX 
30 Function: Designates the reproduction duration designated by INX-nnn with a value of which the number of SU is 

divided by 4. The value of INDEX is equivalent to four times larger than the normal SU (around 93 msec). 
Value: 0x0000 (no setting); 0x01 to OxFFFE (up to 6084 sec); OxFFFF (up to end of music program) 

[0093] Next, the music program title areas NM1 and NM2 will be described. 
35 = NM1 

Means: Character string of music program title 

Function: Represents a music program title as one byte code (up to 256 characters) (variable length). The title 
area should be completed with an end code (0x00). The size should be calculated from the end code. When data 
40 is not recorded, null (0x00) should be recorded from the beginning (0x0020) of the area for at least one byte. 

Value: Various character codes 

= NM2 

45 Means: Character string of music program title 

Function: Represents a music program title as two byte code (up to 512 characters) (variable length). The title 
area should be completed with an end code (0x00). The size should be calculated from the end code. When data 
is not recorded, null (0x100) should be recorded from the beginning (0x0120) of the area for at least two bytes. 
Value: Various character codes 



[0094] Data of 80 bytes starting from the fixed position (0x320) of the attribute header is referred to as track infor- 
mation area TRKINF. This area is mainly used to totally manage the security information and copy control information. 
Fig. 19 shows a part of TRKINF. The area TRKINF contains the following areas. 
= CONTENTS KEY (8 bytes) 

Meaning: Value for each music program. The value of CONTENTS KEY is protected in the security block of the 
memory card and then stored. 

Function: Used as a key for reproducing a music program. It is used to calculate the value of MAC. 
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Value: 0 to OxFFFFFFFFFFFFFFFF 
= MAC (8 bytes) 

Meaning: Forged copyright information check value Function: Represents the value generated with a plurality of 
s values of TRKINF including contents cumulation numbers and a secret sequence number. 

[0095] The secret sequence number is a sequence number recorded in the secret area of the memory card. A non- 
copyright protection type recorder cannot read data from the secret area of the memory card. On the other hand, a 
copyright protection type recorder and a computer that operates with a program that can read data from a memory 
card can access the secret area. 
io = A (1 byte) 

Meaning: Attribute of part. 

Function: Represents the information of such as compression mode of a part. 
Value: The details will be described in the following (see Figs. 1 9 and 20). 

[0096] Next, the value of the area A will be described. In the following description, monaural mode (N = 0 or 1) is 
-defined as a special joint mode of which bit 7 = 1 , sub signal = 0, main signal .= (L+R). A non-copyright protection type 
player may ignore information of bits 2 and 1 . 

[0097] Bit 0 of the area A represents information of emphasis on/off state. Bit 1 of the area A represents information 
20 _of reproduction skip or normal reproduction. Bit 2 of the area A represents information of data type such as audio data, 
FAX data, or the like. Bit 3 of the area A is undefined. By a combination of bits 4, 5, and 6, mode information of ATRAC3 
is defined as shown in Fig. 20. In other words, N is a mode value of 3 bits. For five types of modes that are monaural 
(N = 0 or 1), LP (N = 2), SP (N = 4), EX (N = 5), and HQ (N = 7), record duration (64 MB memory card only), data 
transmission rate, and the number of SU per block are listed. The number of bytes of 1 SU depends on each mode. 
25 The number of bytes of 1 SU in the monaural mode is 1 36 bytes. The number of bytes of 1 SU in the LP mode is 192 
bytes. The number of bytes of 1 SU in the SP mode is 304 bytes. The number of bytes of 1 SU in the EX mode is 384 
bytes. The number of bytes of 1 SU in the HQ mode is 512 bytes. Bit 7 of the area A represents ATRAC 3 modes (0: 
Dual, 1: JOint). 

[0098] For example, an example of which a 64 MB memory card is used in the SP mode will be described. A 64-MB 
30 memory card has 3968 blocks. In the SP mode, since 1 SU is 304 bytes, one block has 53 SU. 1 SU is equivalent to 
(1024/44100) seconds. Thus, one block is (1024/44100) x 53 x (3968 - 10) = 4863 seconds = 81 minutes. The trans- 
mission rate is (44100/1024) x 304 x 8 = 104737 bps. 
= LT (one byte) 

35 Meaning: Reproduction restriction flag (bits 7 and 6) and security partition (bits 5 to 0). 

Function: Represents a restriction of the current track. 
Value: bit 7: 0 = no restriction, 1 = restriction 
bit 6: 0 = not expired, 1 = expired 

bits 5 to 0: security partition (reproduction prohibited other than 0) 

40 

- FNo (2 bytes) 
Meaning: File number. 

Function: Represents the initially recorded track number that designates the position of the MAC calculation value 
45 recorded in the secret area of the memory card. 

Value: 1 to Oxl 90 (400) 

= MG(D) SERIAL-nnn (16 bytes) 

so Meaning: Represents the serial number of the security block (security IC 20) of the recorder/flayer. 

Function: Unique value for each recorder/player 
Value: 0 to 

OxFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 
55 = CONNUM (4 bytes) 

Meaning: Contents cumulation number 

Function: Represents a unique value cumulated for each music program. The value is managed by the security 
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block of the recorder/player. The upper limit of the value is 2 32 that is 4,200,000,000. Used to identify a recorded 
program. 

Value: 0 to OxFFFFFFFF 
YMDhms-S (4 bytes) (Option) 

Meaning: Reproduction start date and time of track with reproduction restriction 
Function: Represents the date and time at which data reproduction is permitted with EMD. 
Value: Same as the notation of date and time of other areas 

= YMDhms-E (4 bytes) (Option) 

■* Meaning: Reproduction end date and time of track with reproduction restriction 
Function: Represents the date and time at which data reproduction is expired with EMD. 
Value: Same as the notation of date and time of other areas 

*5 = MT (1 byte) (Option) 

Meaning: Maximum value of number of permitted reproduction times 

Function: Represents the maximum number of reproduction times designated by EMD. 

Value: 1 to OxFF When not used, the value of the area MJ is 00. 



10 



20 



30 



35 



= CT (1 byte) (Option) 



Meaning: Number of reproduction times 

Function: Represents the number of reproduction times in the number of permitted reproduction times. Whenever 
25 data is reproduced, the value of the area CT is decremented. 

Value: 0x00 to OxFF. When not used, the value of the area CT is 0x00. When bit 7 of the area LT is 1 and the value 
of the area CT is 00, data is prohibited from being reproduced. 



= CC (1 byte) 

Meaning: COPY CONTROL 
Function: Controls the copy operation. 

Value: bits 6 and 7 represent copy control information, bits 4 and 5 represent copy control information of a high 
speed digital copy operation, bits 2 and 3 represent a security block authentication level, bits 0 and 1 are undefined. 

[0099] Example of CC: 
(bits 7 and 6) 

11 : Unlimited copy operation permitted 
40 01 : copy prohibited 

00: one time copy operation permitted 

(bits 3 and 2) 
00: analog/digital input recording 

45 MG authentication level is 0. 

[0100] When digital record operation using data from a CD is performed, (bits 7 and 6): 00 and (bits 3 and 2): 00. 
= CN (1 byte) (Option) 

Meaning: Number of permitted copy times in high speed serial copy management system 
50 Function: Extends the copy permission with the number of copy times, not limited to one time copy permission 

and copy free permission. Valid only in first copy generation. The value of the area CN is decremented whenever 
the copy operation is performed. 
Value" 

55 00: Copy prohibited 

01 to OxFE: Number of times 
OxFF: Unlimited copy times 
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[0101] The track information area TRKINF is followed by a 24-byte part management information area (PRTINF) 
starting from 0x0370. When one track is composed of a plurality of parts, the values of areas PRTINF of the individual 
parts are successively arranged on the time axis. Fig. 22 shows a part of the area PRTINF. Next, areas in the area 
PRTINF will be described in the order of the arrangement, 
s = PRTSIZE (4 bytes) 

Meaning: Part size 

Function: Represents the size of a part. Cluster: 2 bytes (highest position), start SU: 1 byte (upper), end SU: 1 
byte (lowest position). 
io Value: cluster: 1 to 0x1 F40 (8000) 

start SU: 0 to Ox AO (160) 

end SU: 0 to OxAO (16) (Note that SU starts from 0.) 

= PRTKEY (8 bytes) 
Meaning: Part encrypting value 

Function: Encrypts a part. Initial value = 0. Note that edit rules should be applied. 
Value: 0 to OxFFFFFFFFFFFFFFFF 

20 - = CON NU M0 (4 bytes) 

Meaning: Initially generated contents cumulation number key 
Function: Uniquely designates an ID of contents. 

Value: Same value as the value of the contents cumulation number initial value key 

25 

[0102] As shown in Fig. 17, the attribute header of an ATRAC3 data file contains additional information INF. The 
additional information is the same as the additional information INF-S (see Figs. 11 and 12B) of the reproduction 
management file except that the start position is not fixed. The last byte position (a multiple of four bytes) at the end 
of one or a plurality of parts is followed by data of the additional information INF 
30 = INF 

Meaning: Additional information with respect to track 

Function: Represents variable length additional information with a header A plurality of different types of additional 
' information may be arranged. Each of additional information areas has an ID and a data size. Each additional 
35 information area is composed of at least 16 bytes and a multiple of 4 bytes. 

Value: Same as additional information INF-S of reproduction management file 

[0103] The above-described attribute header is followed by data of each block of an ATRAC 3 data file. As shown in 
Fig. 23, a header is added for each block. Next, data of each block will be described. 
40 = BLKID-A3D (4 bytes) 

Meaning: BLOCKID FILE ID 

Function: Identifies the top of ATRAC 3 data. 

Value: Fixed value = "A3D" (for example, 0x41 334420) 

45 

= MCode (2 bytes) 
Meaning: MAKER CODE 

Function: Identifies the maker and model of the recorder/player 
so Value: High-order 10 bits (maker code); low-order 6 bits (model code) 

= CONNUMO(4bytes) 

Meaning: Cumulated number of initially created contents 
55 Function: Designates a unique ID for contents. Even if the contents are edited, the value of the area CONNUMO 

is not changed. 

Value: Same as the contents cumulation number initial key 
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= BLOCK SERIAL (4 bytes) 
Meaning: Serial number assigned to each track 

Function: Starts from 0 and increments by 1 . Even if the contents are edited, the value of the area BLOCK SERIAL 
5 is not changed. 

Value: 0 to OxFFFFFFFF 

= BLOCK-SEED (8 bytes) 

io Meaning: Key for encrypting one block 

Function: The beginning of the block is a random number generated by the security block of the recorder/pilayer. 
The random number is followed by a value incremented by 1 . When the value of the area BLOCK-SEED is lost, 
since sound is not generated for around one second equivalent to one block, the same data is written to the header 
and the end of the block. Even if the contents are edited, the value of the area BLOCK-SEED is not changed. 

is Value: Initially 8-bit random number 

= INITIALIZATION VECTOR (8 bytes) 

Meaning: Value necessary for encrypting/decrypting ATRAC3 data 
20 Function: Represents an initial value necessary for encrypting and decrypting ATRAC3 data for each block. A 

block starts from 0. The next block starts from the last encrypted 8-bit value at the last SU. When a block is divided, 
the last eight bytes just before the start SU is used. Even if the contents are edited, the value of the area INITIAL- 
IZATION VECTOR is not changed. 
Value: 0 to OxFFFFFFFFFFFFFFFF 

25 

- SU-nnn 
Meaning: Data of sound unit 

Function: Represents data compressed from 1024 samples. The number of bytes of output data depends on the 
30 compression mode. Even if the contents are edited, the value of the area SU-nnn is not changed. For example, 

in the SP mode, N = 384 bytes. 
Value: Data value of ATRAC3 

[0104] In Fig. 17, since N = 384, 42 SU are written to one block. The first two slots (4 bytes) of one block are used 
35 as a header. In the last slot (two bytes), the areas BLKID-A3D, MCode, CONNUM0, and BLOCK SERIAL are redun- 
dantly written. Thus, M bytes of the remaining area of one block is (16,384 - 384 x 42 - 16 x 3 = 208) bytes. As described 
above, the eight-byte area BLOCK SEED is redundantly recorded. 

[0105] When the FAT area is destroyed, alt blocks of the flash memory are searched. It is determined whether the 
value of the area ID BLKID at the beginning of each block is TLO, HDO, or A3D. As shown in Figs. 24A to 24C, at step 
^o SP1, it is determined whether or not the value of the area ID BLKID at the beginning of the top block is BLKID-TL0. 
When the determined result at step SP1 is No, the flow advances to step SP2. At step SP2, the block number is 
incremented. Thereafter, at step SP3, it is determined whether or not the last block has been searched. 
[0106] When the determined result at step SP3 is No, the flow returns to step SP1 . 

[0107] When the determined result at step SP1 is Yes, the flow advances to step SP4. At step SP4, it is determined 
45 that the searched block is the reproduction management file PBLIST Thereafter, the flow advances to step SP5. At 
step SP5, the number of total tracks T-TRK in the reproduction management file PBLIST is stored as N to the register. 
For example, when the memory has stored 10 ATRAC3 data files (10 music programs), 10 has been stored in T-TRK. 
[0108] Next, with reference to the value of the number of total tracks T-TRK, TRK-001 to TRK-400 of blocks are 
successively referenced. In this example, since 10 music programs have been recorded, TRK-001 to TRK-010 of 
SO blocks are referenced. Since a file number FNO has been recorded in TRK-XXX (where X = 1 to 400) at step SP7, a 
table that correlates the track number TRK-XXX and the file number FNO is stored to the memory. Next, at step SP8, 
N stored in the register is decremented. A loop of steps SP6, SP7, and SP8 is repeated until N becomes 0 at step SP9. 
[0109] When the determined result at step SP9 is Yes, the flow advances to step SP10. At step SP10, the pointer is 
reset to the top block. The searching process is repeated from the top block. Thereafter, the flow advances to step 
55 SP11. At step SP11 : it is determined whether or not the value of the area ID BLKID of the top block is BLKID-HD0. 
When the determined result at step SP11 is No : the flow advances to step SP12. At step SP12, the block number is 
incremented. At step SP13, it is determined whether or not the last block has been searched. 

[0110] When the determined result at step SP13 is No, the flow returns to step SP11. The searching process is 
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repeated until the determined result at step SP11 becomes Yes. 

[01 1 1] When the determined result at step SP11 is Yes, the flow advances to step SP1 4. At step SP1 4, it is determined 
that the block is the attribute header (see Fig. 8) (0x0000 to 0x03FFF shown in Fig. 1 8) at the beginning of the ATRAC3 
data file. 

s [01 1 2] Next, at step SP1 5, with reference to the file number FNO, the sequence number BLOCK SERIAL of the same 
ATRAC data file, and the contents cumulation number key CONNUM0 contained in the attribute header, they are stored 
to the memory. When 10 ATRAC3 data files have been recorded, since there are 10 blocks of which the value of the 
area ID BLKID of the top block is BLKID-TL0, the searching process is continued until 10 blocks are searched. 
[0113] When the determined result at step SP13 is Yes, the flow advances to step SP16. At step SP16, the pointer 

10 is reset to the top block. The searching process is repeated from the top block. 

[0114] Thereafter, the flow advances to step SP17. At step SP17, it is determined whether or not the value of the 
- area ID BLKID of the top block is BLK1D-A3D. 

[0115] When the determined result at step SP17 is No, the flow advances to step SP18. At step SP18, the block 
number is incremented. Thereafter, at step SP18', it is determined whether or not the last block has been searched. 

is ? When the determined result at step SP18' is No, the flow returns to step SP17. 

[0116] When the determined result at step SP17 is Yes, the flow advances to step SP1 9. At step SP19, it is determined 
that the block contains ATRAC 3 data. Thereafter, the flow advances to step SP20. At step SP20, with reference to the 
serial number BLOCK SERIAL recorded in the ATRAC 3 data block and the contents cumulation number key 
CONNUM0, they are stored to the memory. 

20 -[0117] In the same ATRAC3 data file, the common number is assigned as the contents cumulation number key 
CONNUM0. In other words, when one ATRAC3 data file is composed of 10 blocks, a common number is assigned to 
ail the values of the areas CONNUM0. 

[0118] In addition, when one ATRAC 3 data is composed of 10 blocks, serial numbers 1 to 0 are assigned to the 
values of the areas BLOCK SERIALs of the 1 0 blocks. 
25 [01 1 9] Corresponding to the values of the areas CONN U MO and BLOCK SERIAL, it is determined whether the current 
block composes the same contents and the reproduction order of the current block in the same contents (namely, the 
connection sequence). 

[0120] When 10 ATRAC3 data files (namely, 10 music programs) have been recorded and each of the ATRAC3 data 
files is composed of 10 blocks, there are 100 data blocks. 
30 [0121] With reference to the values of the areas CONNUM0 and BLOCK SERIAL, the reproduction order of music 
programs of 100 data blocks and the connection order thereof can be obtained. 

[0122] When the determined result at step SP19 is Yes, all the blocks have been searched for the reproduction 
management file, the ATRAC 3 data file, and the attribute file. Thus, at step SP21, based on the values of the areas 
CONNUM0, BLOCK SERIAL, FNO, and TRK-X in the order of block numbers of the blocks stored in the memory, the 

35 file connection state is obtained. 

[0123] After the connection state is obtained, the FAT may be generated in a free area of the memory. 
[0124] Next, a management file according to a second embodiment of the present invention will be described. Fig. 
25 shows the file structure according to the second embodiment of the present invention. Referring to Fig. 25, a music 
directory contains a track information management file TRKLIST.MSF (hereinafter, referred to as TRKLIST), a backup 

40 track information management file TRKLISTB.MSF (hereinafter, referred to as TRKLISTB), an additional information 
file INFLISTMSF (that contains an artist name, an ISRC code, a time stamp, a still picture data, and so forth (this file 
is referred to as INFIST)), an ATRAC 3 data file A3Dnnnn.MSF (hereinafter, referred to as A3nnnn). The file TRKLIST 
contains two areas NAME1 and NAME2. The area NAME1 is an area that contains the memory card name and the 
program name (for one byte code corresponding to ASCII/8859-1 character code). The area NAME2 is an area that 

45 contains the memory card name and the program name (for two byte code corresponding to MS-JIS/Hankul/Chinese 
code). 

[0125] Fig. 26 shows the relation between the track information management file TRKLIST, the areas NAME1 and 
NAME2 : and the ATRAC3 data file A3Dnnnn. The file TRKLIST is a fixed-length file of 64 kbytes (= 16 k x 4). An area 
of 32 kbytes of the file is used for managing tracks. The remaining area of 32 kbytes is used to contain the areas 
so NAME1 and NAME2. Although the areas NAME1 and NAME2 for program names may be provided as a different file 
as the track information management file, in a system having a small storage capacity, it is convenient to totally manage 
the track information management file and program name files. 

[0126] The track information area TRKINF-nnnn and part information area PRTINF-nnnn of the track information 
management file TRKLIST are used to manage the data file A3Dnnnn and the additional information INFLIST Only 
55 the ATRAC3 data file A3Dnnnn is encrypted. In Fig. 26, the data length in the horizontal direction is 16 bytes (0 to F). 
A hexadecimal number in the vertical direction represents the value at the beginning of the current line. 
[0127] According to the second embodiment, three files that are the track management file TRKLIST (including a 
program title file), the additional information management file INFLIST, and the data file A3Dnnnn are used. According 
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to the first embodiment (see Figs. 7,8, and 9), two files that are the reproduction management file PBLIST for managing 
all the memory card and the data file ATRAC3 for storing programs are used. 

[0128] Next, the data structure according to the second embodiment will be described. For simplicity, in the data 
structure according to the second embodiment, the description of similar portions to those of the first embodiment is 
s omitted. 

[0129] Fig. 27 shows the detailed structure of the track information management file TRKLIST. In the track information 
management file TRKLIST, one cluster (block) is composed of 16 kbytes. The size and data of the file TRKLISTB are 
the same as those of the backup hie TRKLISTB. The first 32 bytes of the track information management file are used 
as a header. As with the header of the reproduction management file PBLIST, the header of the file TRKLIST contains 
io a BLKID-TL07TL1 (backup file ID) area (4 bytes), an areaT-TRK (2 bytes) for the number of total tracks, a maker code 
area MCode (2 bytes), an area REVISION (4 bytes) for the number of TRKLIST rewrite times, and an area S-YMDhms 
(4 bytes) (option) for update date and time data. The meanings and functions of these data areas are the same as 
those of the first embodiment In addition, the file TRKLIST contains the following areas. 
= YMDhms (4 bytes) 

75 [0130] Represents the last update date (year, month, day) of the file TRKLIST. 
= N1 (1 byte) (Option) 

[0131] Represents the sequential number of the memory card (numerator side). When one memory card is used, 
the value of the area N1 is 0x01 . 
- N2 (1 byte) (Option) 

20 [0132] Represents the sequential number of the memory card (denominator side). When one memory card is used, 
the value of the area N2 is 0x01 . 
= MSID (2 bytes) (Option) 

[0133] Represents the ID of a memory card. When a plurality of memory cards is used, the value of the area MSID 
of each memory card is the same (T B D ) (T B.D. (to be defined) represents that this value may be defined in future). 
25 = S-TRK (2 bytes). 

[0134] Represents a special track (TBD ). Normally, the value of the area S-TRK is 0x0000. 

= PASS (2 bytes) (Option) 
[0135] Represents a password (T B D } 

= APP (2 bytes) (Option) 

30 [01 36] Represents the definition of a i reproduction application (T.B.'D.) (normally, the value of the area APP is 0x0000). 
= INF-S (2 bytes) (Option) 

[0137] Represents the additional information pointer of the entire memory card. When there is no additional infor- 
mation, the value of the area INF-S is OxCO 

[01 38] The last 1 6 bytes of the file TRKLIST are used for an area BLKID-TL0, an area MCode, and an area REVISION 
35 that are the same as those of the header The backup file TRKLISTB contains the above-described header. In this 
case : the header contains an area BLKID-TL1 , an area MCode, and an area REVISION. 

[0139] The header is followed by a t^ac* information area TRKINF for information with respect to each track and a 
part information area PRTINF for information with respect to each part of tracks (music programs). Fig. 27 shows the 
areas preceded by the area TRKLIST The lower portion of the area TRKLISTB shows the detailed structure of these 

40 areas. In Fig. 27, a hatched area represents an unused area. 

[0140] The track information area TRKINF-nnn and the part information area PRTINF-nnn contain areas of an 
ATRAC 3 data file. In other words, the track information area TRKINF-nnn and the part information area PRTINF-nnn 
each contain a reproduction restriction flag area LT (1 byte), a contents key area CONTENTS KEY (8 bytes), a recorder/ 
player security block serial number area MG(D) SERIAL (16 bytes), an area XT (2 bytes) (option) for representing a 

45 feature portion of a music program, an area I NX (2 bytes) (option), an area YMDhms-S (4 bytes) (option), an area 
YMDhms-E (4 bytes) (option), an area MT (i byte) (option), an area CT (1 byte) (option), an area CC (1 byte) (option), 
an area CN (1 byte) (option) (these areas YMDhms-S, YMDhms-E, MT, CT, CC, and CN are used for reproduction 
restriction information and copy contio information), an area A (1 byte) for part attribute, a part size area PRTSIZE (4 
bytes), a part key area PRTKEY (8 byicb ) and a contents cumulation number area CONNUM (4 bytes). The meanings, 

so functions, and values of these areas arc tie same as those of the first embodiment. In addition, the track information 
area TRKINF-nnn and the part information area PRTINF-nnn each contain the following areas. 

= TO (1 byte) 
[0141] Fixed value (TO = 0x74) 
= INF-nnn (Option) (2 bytes) 

55 [0142] Represents the additional information pointer (0 to 409) of each track. 00: music program without additional 
information. 

= FNM-nnn (4 bytes) 
[0143] Represents the file number (0x0000 to OxFFFF) of an ATRK3 data file. 
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[0144] The number nnnn (in ASCII) of the ATRAC 3 data file name (A3Dnnnn) is converted into Oxnnnnn. 

= APP_CTL (4 bytes) (Option) 
[0145] Represents an application parameter (T.B.D.) (Normally, the value of the area APP_CTL is 0x0000). 

= P-nnn (2 bytes) 

5 [0146] Represents the number of parts (1 to 2039) that compose a music program. This area corresponds to the 
above-described area T-PART. 

= PR (T byte) 
[0147] Fixed value (PR = 0 x 50). 

[0148] Next, the areas NAME1 (for one byte code) and NAME2 (for two byte code) for managing names will be 
io described. Fig. 28 shows the detailed structure of the area NAME1 (for one byte code area). Each of the areas NAME1 
and NAME2 (that will be described later) is segmented with eight bytes. Thus, their one sbt is composed of eight bytes. 
- At 0x8000 that is the beginning of each of these areas, a header is placed. The header is followed by a pointer and a 
name. The last slot of the area NAME1 contains the same areas as the header. 
= BLKID-NM1 (4 bytes) 
is - [01 49] Represents the contents of a block (fixed value) (NM1 = 0x4E4D2D31 ). 
= PNM1-nnn (4 bytes) (Option) 
10150] Represents the pointer to the area NM1 (for one byte code). 
= PNM1-S 

[0151] Represents the pointer to a name representing a memory card. 
20 -[0152] nnn (= 1 to 408) represents the pointer to a music program title. 

[0153] The pointer represents the start position (2 bytes) of the block, the character code type (2 bits), and the data 
size (14 bits). 

= NM1-nnn (Option) 

[0154] Represents the memory card name and music program title for one byte code (variable length). An end code 
25 (0x00) is written at the end of the area. 

[0155] Fig. 29 shows the detailed data structure of the area NAME2 (for two byte code). At 0x8000 that is the be- 
ginning of the area, a header is placed. The header is followed by a pointer and a name. The last slot of the area 
NAME2 contains the same areas as the header. 
= BLKID-NM2 (4 bytes) 
30 [0156] Represents the contents of a block (fixed value) (NM2 = 0x4E4D2D32). 
= PNM2-nnn (4 bytes) (Option) 
[0157] Represents the pointer to the area NM2 (for two byte code). 

[0158] PNM2-S represents the pointer to the name representing the memory card, nnn (= 1 to 408) represents the 
pointer to a music program title. 
35 [0159] The pointer represents the start position (2 bytes) of the block, the character code type (2 bits), and the data 

size (14 bits). 

- NM2-nnn (Option) 

[0160] Represents the memory card name and music program title for two byte code (variable). An end code (0x0000) 
is written at the end of the area. 

40 [0161] Fig. 30 shows the data arrangement (for one block) of the ATRAC 3 data file A3Dnnnn in the case that 1 SU 
is composed of N bytes. In this file, one slot is composed of eight bytes. Fig. 30 shows the values of the top portion 
(0x0000 to 0x3FF8) of each slot. The first four slots of the file are used for a header. As with the data block preceded 
by the attribute header of the data file (see Fig. 17) of the first example, a header is placed. The header contains an 
area BLKID-A3D (4 bytes), a maker code area MCode (2 bytes), an area BLOCK SEED (8 bytes) necessary for en- 

45 crypting process, an area CONNUM0 (4 bytes) for the initial contents cumulation number, a serial number area BLOCK 
SERIAL (4 bytes) for each track, and an area INITIALIZATION VECTOR (8 bytes) necessary for encrypting/decrypting 
process. The second last slot of the block redundantly contains an area BLOCK SEED. The last slot contains areas 
BLKID-A3D and MCode. As with the first embodiment, the header is followed by the sound unit data SU-nnnn. 
[0162] Fig. 31 shows the detailed data structure of the additional information management file INFLIST that contains 

so additional information. In the second embodiment, at the beginning (0x0000) of the file INFLIST, the following header 
is placed. The header is followed by the following pointer and areas. 

= BLKID-INF (4 bytes) 
[0163] Represents the contents of the block (fixed value) (INF = 0x494E464F). 
= T-DAT (2 blocks) 

55 [0164] Represents the number of total data areas (0 to 409). 
= MCode (2 bytes) 
[0165] Represents the maker code of the recorder/player 
= YMDhms (4 bytes) 
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[0166] Represents the record updated date and lime. 
= INF-nnnn (4 bytes) 

[0167] Represents the pointer to the area DATA of the additional information (variable length, as 2 bytes (slot) at a 
time). The start position is represented with the high order 16 bits (0000 to FFFF). 
5 = DataSlot-0000 (0x0800) 

[0168] Represents the offset value from the beginning (as a slot at a time). 

[0169] The data size is represented with low order 1 6 bits (0001 to 7FFF). A disable flag is set at the most significant 
bit. MSB = 0 (Enable), MSB = 1 (Disable) 

[0170] The data size represents the total data amount of the music program. 
io [0171] (The data starts from the beginning of each slot. (The non-data area of the slot is filled with 00.) 
[0172] The first INF represents a pointer to additional information of the entire album (normally INF-409). 
[0173] Fig. 32 shows the structure of additional information. An 8-byte header is placed at the beginning of one 
additional information data area. The structure of the additional information is the same as that of the first embodiment 
(see Fig. 12C). In other words, the additional information contains an area IN (2 bytes) as an ID, an area key code ID 
75 (1 byte), an area SIZE (2 bytes) that represents the size of each additional information area, and a maker code area 
MCode (2 bytes). In addition, the additional information contains an area SID (1 byte) as a sub ID. 
_ [01 74] According to the second embodiment of the present invention, in addition to the file system defined as a format 
of the memory card, the track information management file TRKLIST or music data is used. Thus, even il the FAT is 
destroyed, the file can be recovered. Fig. 33 shows a flow of a file recovering process. To recover the file, a computer 
20 that operates with a file recovery program and that can access the memory card and a storing device (hard disk, RAM, 
" or the like) connected to the computer are used. The computer has a function equivalent to the DSP30. Next, a file 
recovering process using the track management file TRKLIST will be described. 

[0175] All blocks of the flash memory whose FAT has been destroyed are searched for TL-0 as the value (BLKID) 
at the top position of each block. In addition, all the blocks are searched for NM-1 as the value (BLKID) at the top 
25 position of each block. Thereafter, all the blocks are searched for NM-2 as the value (BLKID) at the top position of each 
block. All the contents of the four blocks (track information management file) are stored to for example a hard disk by 
the recovery computer. 

[0176] The number of total tracks is obtained from data after the fourth byte of the track information management 
file. The 20-th byte of the track information area TRKINF-001, the value of the area CONNUM-001 of the first music 
30 program, and the value of the next area P-001 are obtained. The number of parts is obtained with the value of the area 
P-001 . The values of the areas PRTSI2E of all parts of the track 1 of the area PRTINF is obtained. The number of total 
blocks (clusters) n is calculated and obtained. 

[0177] After the track information management file is obtained, the flow advances to step 102. At step 102, a voice 
data file (ATRAC3 data file) is searched. All blocks of other than the management file is searched from the flash memory. 

35 Bbcks whose top value (BLKID) is A3D are collected. 

[0178] A block of which the value of the area CONNUM0 at the 16-th byte of A3Dnnnn is the same as that of the 
area CONNUM-001 of the first music program of the track information management file and of which the value of the 
area BLOCK SERIAL that starts from 20-th byte is 0 is searched. After the first block is obtained, a block (cluster) with 
the same value of the area CONNUM value as the first block and of which the value of BLOCK SERIAL is incremented 

40 by 1 (1 = 0 '+ 1 ) is searched. After the second block is obtained, a block with the same value of the area CONNUM0 
as the second block and of which the value of the area BLOCK SERIAL is incremented by 1 (2 = 1 + 1 ) is searched. 
[01 79] By repeating the process, the ATRC3 data file is searched until n blocks (clusters) of the track 1 are obtained. 
When all the blocks (clusters) are obtained, they are successively stored to the hard disk. 

[0180] The same process for the track 1 is performed for the track 2. In other words, a block of which the value of 
45 the area CONNUM0 is the same as that of the area CONNUM-002 of the first music program of the track information 
management file and of which the value of the area BLOCK SERIAL that starts at the 20-th byte is searched. Thereafter, 
in the same manner as the track 1 , the ATRAC 3 data file is searched until the last block (cluster) n' is detected. After 
all blocks (clusters) are obtained, they are successively stored to the hard disk. 

[0181] By repeating the above-described process for all tracks (the number of tracks: m), all the ATRAC 3 data is 
so stored to the hard disk controlled by the recovering computer. 

[0182] At step 103, the memory card whose the FAT has been destroyed is re-initialized and then the FAT is recon- 
structed. A predetermined directory is formed in the memory card. Thereafter, the track information management file 
and the ATRAC3 data file for m tracks are copied from the hard disk to the memory card. Thus, the recovery process 
is finished. 

55 [0183] In the management file and data file, important parameters (in particular, codes in headers) may be recorded 
triply rather than doubly. When data is redundantly recorded; the same data may be recorded at any positions as long 
as they are apart from each other for one page or more. 

[0184] Next, a forge-checking process for a data file according to the first embodiment will be described. Various 
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types of information can be checked for forged information such as reproduction management file PBLISTMSF and 
TRAC3 data file that is compressed audio data. Since the reproduction management file PBLISTMSF contains clock 
information S-YMDhms, the clock information is checked so as to prevent the user from forging it. 
[0185] A forge-check code is generated by calculating CONTENTS KEY (CK) of an ATRAC 3 data file generated 
s along with the reproduction management file PBLISTMSF using the hash function. In addition, since the file may be 
erased or moved, the value of CONTENTS KEY (CK) is stored in another file. When clock information S-YMDhms has 
not been entered, all hash values are set to zero with no calculations. Whenever the clock information S-YMDhms is 
updated, the hash values are calculated. 

[0186] With respect to an ATRAC 3 data file that is audio data, track attribute A, reproduction limitation flag, security 
io version LT, MG (D) serial number MG (D) Serial contents cumulation number CONNUM, reproduction start date/time 
YMDhms-S, reproduction expiration date/time YMDhms-E, number of track reproduction times CT, number of repro- 
- duction permission times MX copy control CC, and number of high speed digital copy permission times CN (optional) 
are forge-checked so as to prevent the user from forging them: A forge<heck code is generated by calculating CON- 
TENTS KEY (CK) of the ATRAC3 data file using the hash function. When the ATRAC 3 data file is divided or combined, 
is - with new CONTENTS KEY, the hash value is re-calculated. 

[0187] Fig. 34 is a block diagram showing a forge-checking circuit of the digital audio recorder according to the 
present invention. When a memory card is attached to the digital audio recorder or when the reproduction button is 
pressed, the attached memory is authenticated. When the memory card has been successfully authenticated, a DSP 
(Digital Signal Processor) 30 causes the track information management file TRKLISTMSF to be read from a flash 
20 -memory of a memory card 40 to an S-RAM (Static RAM) 31 . 

[0188] In Fig. 34, a reproduction limitation value block 70 is contained in the track information management file. The 
track information management file is stored in a predetermined area of the flash memory of the memory card 40. The 
reproduction limitation value block 70 is read from the flash memory to the SRAM 31 (36). The reproduction limitation 
value block 70 is forge-checked. The forge-checking circuit shown in Fig. 34 includes a hash calculating circuit 71 , an 
25 encrypting circuit 22 having predetermined memory areas (72 and 73) that are non-volatile memories, a match detecting 
circuit 74, and a controlling portion 75. The controlling portion 75 has an inner clock 76. The hash calculating circuit 
71 , the match detecting circuit 74, and the controlling portion 75 are accomplished with a hardware structure or software 
processes. The software processes are performed by the DSP 30. The hash calculating circuit 71 can be accomplished 
with lor example a functional device that composes the encrypting circuit 22. 
30 [0189] The controlling portion 75 monitors the attached state of the memory card 40. When the memory card 40 is 
attached to the digital audio player, the controlling portion 75 determines whether or not the reproducing operation of 
files stored in the memory card 40 is permitted corresponding to predetermined information of the reproduction limitation 
value block 70. The predetermined information is for example track attribute A, reproduction limitation flag, security 
version LT, MG (D) serial number MG (D) Serial contents cumulation number CONNUM, reproduction start dateAime 
35 YMDhms-S, reproduction expiration dateAime YMDhms-E, number of track reproduction times CT, number of repro- 
duction permission times MT, COPY Control CC, number of high speed digital copy permission times CN (optional), 
CONTENTS KEY (CK), and so forth. With respect to the reproduction start dateAime and reproduction expiration date/ 
time, they are compared with the dateAime of the inner clock 76 so as to determine whether or not the reproducing 
operation is permitted. With respect to the number of track reproduction times CT and the number of reproduction 
40 permission times MT, corresponding thereto, it is determined whether or not the reproducing operation is permitted. 
[0190] The hash calculating circuit 71 calculates hash values of individual parameter of the reproduction limitation 
value block 70. The hash values are obtained using the hash function. When the reproduction limitation value block 
70 is forged, the hash values are varied. The hash function is generally defined in ISOAEC 10118-1 , JIS X5057-1 . The 
hash function is a function of which any two different input values that become the same output value cannot be 
45 calculated. A calculated result of the hash calculating circuit 71 is supplied to the encrypting circuit 22. 

[0191] Control information is supplied from the controlling portion 75 to the non-volatile memory of the encrypting 
circuit 22. Hash values calculated before the reproducing operation are stored in the predetermined memory area 72 
as current hash values. On the other hand, hash values calculated after the former reproducing operation are stored 
as former hash values to the predetermined memory area 73. The current hash values and the former hash value 
so stored in the encrypting circuit 22 are read and supplied to the match detecting circuit 74. The values in the predeter- 
mined memory areas (72 and 73) of the flash memory of the encrypting circuit 22 cannot be read from the outside of 
the digital audio recorder. Thus, it is impossible to access the hash values stored in the areas 72 and 73 from the 
outside. Only a match detection result of the match detecting circuit 74 can be read from the outside. An area that 
cannot be accessed from the outside is referred to as tamper resistant area. 
ss [0192] The match detecting circuit 74 compares the current hash values with the former hash values. Depending on 
whether the current hash values are the same as the former hash values, it is determined whether the reproduction 
limitation value block 70 has been forged. Output data of the match detecting circuit 74 is supplied to the controlling 
portion 75. 
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[0193] The controlling portion 75 determines whether the reproducing operation is permitted or prohibited corre- 
sponding to both the determination based on track attribute A, reproduction limitation flag, security version LT, MG (D) 
serial number MG (D) Serial, contents cumulation number CONNUM, reproduction start date/time YMDhms-S, repro- 
duction expiration date/time YMDhms-E, number of track reproduction times CT, number of reproduction permission 
s times MT, COPY CONTROL CC, number of high speed digital copy permission times CN (optional), and CONTENTS 
KEY (CK) and the output data of the match detecting circuit 74. The controlling portion 75 generates control information 
corresponding to the determined result. In other words, when it is determined that the reproduction limitation value 
block 70 has not been forged and the reproducing operation is permitted, the controlling portion 75 generates control 
information that permits the reproducing operation. 

10 [0194] On the other hand, when the reproduction limitation value block 70 has been forged, the controlling portion 
75 generates control information that prohibits the reproducing operation. Even if the reproduction limitation value block 
70 has not been forged, when the reproducing operation is prohibited corresponding to track attribute A, reproduction 
limitation flag, security version LT, MG (D) serial number MG (D) Serial, contents cumulation number CONNUM, re- 
production start date/time YMDhms-S, reproduction expiration date/time YMDhms-E, number of track reproduction 

*s times CT, number of reproduction permission times MT, COPY CONTROL CC, number of high speed digital copy 
permission times CN (optional), and CONTENTS KEY (CK), the reproducing operation is prohibited. 
^ [01 95] In the above-described example, the forge-checking process for an ATRAC 3 data file was explained. Likewise, 
the forge-checking process is performed for the clock information S-YMDhms contained in the reproduction manage- 
ment file PBLISTMSF. A forge-check code is generated by calculating CONTENTS KEY (CK) of the first program of 

20 an ATRAC 3 data file generated along with the reproduction management file PBLISTMSF using the hash function. 
[0196] The calculating process of this example is performed in the same manner as that for an ATRAC3 data file. 
The circuit of this calculating process can be shared with that for the ATRAC3 data file. Since the file may be erased 
or moved, the value of CONTENTS KEY (CK) is stored in another file. When clock information S-YMDhms has not 
been entered, all hash values are set to zero with no calculations. Whenever the clock information S-YMDhms is 

25 updated, the hash values are calculated. 

[0197] Fig. 35 shows a process of which an EMD (Electric Music Distribution) terminal (not shown) downloads an 
ATRAC 3 data file in the format according to the first embodiment to a memory card. In addition, Fig. 35 shows a process 
of which the EMD terminal downloads an ATRAC 3 data file that has been compressed and encrypted through a public 
line (ISDN line, telephone line, or satellite line) to a memory card. In this example, it is assumed that a memory card 

30 (flash memory) that has not been used (namely, a virgin memory card (flash memory)) is attached to the EMD terminal. 
[0198] When a virgin memory card is attached to the EMD terminal at step SP101 , a reproduction management file 
PBLISTMSF is generated. In addition, the downloaded date/time information is generated. The downloaded date/time 
information is recorded as clock information S-YMDhms of the reproduction management file PBLISTMSF. 
[0199] At step SP102, when an ATRAC 3 data file that has been compressed and encrypted is received through the 

35 public line (ISDN line, telephone line, or satellite line) and recorded to the flash memory, an attribute header is generated 
as shown in Fig. 9 and added to the ATRAC3 data file. 

[0200] At step SP103, with CONTENTS KEY (CK) contained in the attribute header, the hash calculating circuit 71 
calculates the clock information S-YMDhms of the reproduction management file PBLISTMSF using the hash function 
and stores the calculated value to the memory area 73 of the encrypting circuit 22. 

40 [0201] At step SP104, with CONTENTS KEY (CK) contained in the attribute header, the hash calculating circuit 71 
calculates the reproduction limitation information (track attribute A, reproduction limitation flag, security version LT, 
reproduction start date/time YMDhms-S, reproduction expiration date/time YMDhms-E, number of track reproduction 
times CT, number of reproduction permission times MT, COPY CONTROL CC, and number of high speed digital copy 
permission times CN (optional) of the ATRAC K 3 data file using the hash function. The calculated value obtained by 

45 the hash calculating circuit 71 is stored in the memory area 73 of the encrypting circuit 22. 

[0202] In addition, with CONTENTS KEY (CK) contained in the attribute file, the hash calculating circuit 71 calculates 
the MG (D) serial number MG (D) Serial and the contents cumulation number CONNUM generated along with the 
attribute file using the hash function. The calculated value obtained by the hash calculating circuit 71 is stored in the 
memory area 73 of the encrypting circuit 22. Since data is recorded to a virgin flash memory, no data has been recorded 

50 in the memory area 72 of the encrypting circuit 22. 

[0203] At step SP105, it is determined whether or not the flash memory has been detached from the EMD terminal. 
When the determined result at step SP105 is Yes, the flow advances to step SP106. At step SP106, it is determined 
whether or not the flash memory has been re-attached. When the determined result at step SP105 is No, the flow 
advances to step SP107. At step SP107, it is determined whether or not the power of the'EMD terminal has been 

55 turned off. 

[0204] When the determined result at step SP107 is Yes, the flow advances to step SP108. At step SP108, it is 
determined whether or not the power has been turned on again. 

[0205] When the determined result at step SP106 is Yes or when the determined result at step SP108 is Yes, the 
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flow advances to step SP109. At step SP109, with CONTENTS KEY (CK) contained in the attribute header, the hash 
calculating circuit 71 calculates the clock information S-YMDhms of the reproduction management file PBLISTMSF 
using the hash function. The calculated value obtained by the hash calculating.circuit 71 is stored to the memory area 
72 of the encrypting circuit 22. 

5 [0206] At step SP110, it is determined whether or not the current hash values stored in the memory area 72 of the 
encrypting circuit 22 matches the former hash values stored in the memory area 73 of the encrypting circuit 22. When 
the determined result at step SP110 is Yes, the current hash values stored in the memory area 72 of the encrypting 
circuit 22 are copied to the former hash values stored in the memory area 73 of the encrypting circuit 22. 
[0207] At step SP1 1 1 , it is determined whether or not a reproduction command has been issued. When the determined 

10 result at step SP111 is Yes and when the determined result at step SP110 is Yes, the flow advances to step SP112. At 
step SP112, with CONTENTS KEY (CK) stored in the attribute file of the ATRAC3 data file, the hash calculating circuit 
71 calculates the track attribute A, reproduction limitation flag, security version LT, MG (D) serial number MG (D) Serial, 
contents cumulation number CONNUM, reproduction start dateAime YMDhms-S, reproduction expiration date/time 
YMDhms-E, number of track reproduction times CT, number of reproduction permission times MX COPY CONTROL 

is. CC, and number of high speed digital copy permission times CN (optional) of the attribute file added to the ATRAC3 
data file corresponding to the reproduction command using the hash function. The calculated value obtained by the 
* hash calculating circuit 71 is stored in the memory area 72 of the encrypting circuit 22. 
[0208] Thereafter, the flow advances to step SP11 3. At step SP11 3, it is determined whether or not the hash values 
stored in the memory area 72 of the encrypting circuit 22 obtained by the hash calculating circuit 71 match the hash 

20 - values stored in the memory area 73 of the encrypting circuit 22. 

[0209] The match detecting circuit 74 compares the currently calculated hash values with the formerly calculated 
hash values. When they match, it is determined that any information of track attribute A, reproduction limitation flag, 
security version LT, MG (D) serial number MG (D) Serial, contents cumulation number CONNUM, reproduction start 
date/time YMDhms-S, reproduction expiration date/time YMDhms-E, number of track reproduction times CT, number 

25 of reproduction permission times MT, COPY CONTROL CC, and number of high speed digital copy permission times 
CN (optional) of the attribute file has not been forged. Thereafter, the flow advances to step SP114. At step SP114, 
the reproducing operation of the ATRAC3 data file is permitted. 

[0210] When the determined result at step SP113 is No, it is determined that some of the track attribute A, repro- 
duction limitation flag, security version LT, MG (D) serial number MG (D) Serial, contents cumulation number CONNUM, 

30 reproduction start date/time YMDhms-S, reproduction expiration date/time YMDhms-E, number of track reproduction 
times CT, number of reproduction permission times MT, COPY CONTROL CC, and number of high speed digital copy 
permission times CN (optional) of the attribute file has been forged. In this case, the flow advances to step SP115. At 
step SP115, the reproducing operation of the ATRAC 3 data file is prohibited. Thereafter, the flow advances to step 
SP116. At step SP116, a forging flag is set. 

35 [0211] When the ATRAC 3 data file is reproduced, it is determined whether or not predetermine values (any positive 
integers) have been set to the number of track reproduction times CT and the number of reproduction permission times 
MT. When a predetermined value has been set to the number of track reproduction times CT, it is decremented by 1 . 
When the number of track reproduction times CT is zero and a predetermined number (any positive integer) has been 
set to the number of reproduction permission times MT, since the reproducing operation has been performed the number 

40 of reproduction permission times, the reproducing operation of the ATRAC3 data file is prohibited. 

[0212] Next, a real example of the operation of the EMD terminal in the format according to the second embodiment 
will be described in detail. Fig. 36 shows an example of a process of which the EMD (Electric Music distribution) terminal 
downloads a music file having a two-times reproduction limitation. For simplicity, it is assumed that the reproduction 
expiration date/time is not limited. The EMD terminal has the same encrypting circuit (not shown) as the above-de- 

45 scribed digital audio recorder. The encrypting circuit authenticates an attached memory card. When the attached mem- 
ory card has been successfully authenticated, the encrypting circuit records an encrypted audio file (ATRAC 3 data file) 
to the memory card. In addition, the EMD terminal supplies reproduction limitation information ol the audio file to the 
digital audio recorder. 

[0213] The digital audio recorder performs a formatting process for the audio file and the reproduction limitation 
50 information and records the formatted data to the flash memory. In Fig. 36, when the EMD terminal downloads data to 
the digital audio recorder, it performs a process denoted by S201 . At step S1 , the digital audio recorder receives data 
having a reproduction times limitation from the EMD terminal and sets (MT = 2) and (CT = 2) to TRKINF of the track 
information management file TRKLIST. 

[0214] In addition, the hash calculating circuit 71 calculates hash values of several parameters (reproduction limita- 
55 tion value block 70) including MT, CT, and CONTENTS ID. The hash values calculated by the hash calculating circuit 
71 is stored to the memory area 73 of the encrypting circuit 22. Thereafter, when the power of the digital audio recorder 
is turned off or when the memory card 40 is detached, the reproduction limitation value block 70 is checked for forged 
information. If necessary, whenever the reproducing operation is performed, the reproduction limitation value block 70 
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can be checked for lorged information. 

[0215] After the memory card 40 is detached and then attached again, when the reproduction command is issued 
at step S3, the flow advances to step S202. At step S4, the hash calculating circuit 71 calculates hash values of the 
reproduction limitation value block 70. The hash values calculated by the hash calculating circuit 71 are stored as 

5 current hash values to the memory area 72 of the encrypting circuit 22. The current hash values and the former hash 
values are read and supplied to the match detecting circuit 74. The match detecting circuit 74 compares the current 
hash values with the former hash values. Depending on whether they match, the match detecting circuit 74 determines 
whether or not the reproduction limitation value block 70 has been forged. The match detecting circuit 74 supplies the 
detected result to the controlling portion 75. 

10 [0216] Corresponding to the output data of the match detecting circuit 74, the controlling portion 75 forms control 
information. In other words, when the reproduction limitation value block 70 has not been forged, since the current 
hash values are the same as the former hash values, forged information is not detected. In this case, since the number 
of reproduction times CT is not zero (CT * 0), the flow advances to step S5. At step S5, the controlling portion 75 forms 
control information for controlling the reproducing operation and starts the reproducing operation. After the reproducing 

is operation has been completed, the flow advances to step S6. At step So, the number of reproduction times CT is 
decremented and thereby (CT = 1) is set. In addition, hash values of the reproduction limitation value block 70 are 
. calculated and stored as the former hash values to the memory area 73. 
[0217] After the memory card 40 is detached and then attached again, when the reproduction command is issued 
at step S7, the flow advances to step S203. At step S203, the same process as step S202 is performed. In other words, 

20 hash values of the reproduction limitation value block 70 are calculated and compared with the former hash values. 
Thus, it is determined whether or not the reproduction limitation value block 70 has been forged (at step S8). When 
the reproduction limitation value block 70 has not been forged, the reproducing operation is performed (at step S9). 
Thereafter, the number of reproduction times CT is decremented by 1 and thereby (CT = 0) is set (at step S10). 
[0218] After the number of reproduction times CT is set to zero (CT = 0), regardless of whether the reproduction 

25 limitation value block 70 has been forged : the number of reproduction times CT is considered with priority. Thus, the 
reproducing operation is prohibited. For example, after the memory card 40 is detached and then attached again, when 
the reproduction command is issued at step S11, the flow advances to step S12. At step S12, hash values of the 
reproduction limitation value block 70 are calculated and then the current hash values are compared with the former 
hash values. Since the current hash values match the former hash values, normally, the reproducing operation is 

30 permitted. However, since the number of reproduction times CT is zero (CT = 0), the reproducing operation is prohibited. 
Thus, in this case, the controlling portion 75 forms control information that prohibits the reproducing operation (at step 
S13). In addition, with a speaker and/or a display, the user is informed that because the number of reproduction times 
CT matches the number of reproduction permission times MT, the reproducing operation is prohibited. 
[0219] Next, the case of which TRKINF of the track information management file TRKLIST has been forged will be 

35 described. For example, it is assumed that TRKINF has been forged at step S111 and that the number of reproduction 
permission times MT of the music file has been forged to 10 (MT = 10). 

[0220] When the reproduction command has been issued at step S22, the flow advances to step S23. At step S23, 
hash values of the reproduction limitation value block 70 are calculated. The hash values are stored as the current 
hash values to the memory area 72. The match detecting circuit 74 determines whether the current hash values match 

40 the former hash values. In this case, since the reproduction limitation value block 70 has been forged, the match 
detecting circuit 74 determines that they do not match. Thus, the controlling portion 75 forms control information that 
prohibits the reproducing operation (at step S23). Thus, at step S24, the reproducing operation is not performed. In 
this case, with the speaker and display, the user is informed that because the reproduction limitation value block 70 
has been forged, the reproducing operation is prohibited. 

45 [0221] Thereafter, the flow advances to step S25. At step S25, the forging flag is set to a predetermined position (for 
example, the area "Reserved" shown in Fig. 27) of TRKINF of. TRKLIST The hash values are calculated and stored. 
In the state that the forging flag has been set, even if the number of reproduction permission times MT is set to 2 (MT 
= 2), since the forging flag has been set, the reproducing operation is prohibited (at step S26). In other words, before 
an ATRACK3 data file is reproduced, the forging flag is checked. When the forging flag is detected, the controlling 

50 portion 75 determines that reproducing operation is prohibited. Thus, in this case, the controlling portion 75 forms 
control information that prohibits the reproducing operation. Thus, the reproducing operation is not performed. 
[0222] In the above-described example, whenever the reproducing operation is performed, the number of reproduc- 
tion times CT is decremented by 1 . When the number of reproduction times CT becomes zero (CT = 0), the reproducing 
operation is prohibited. Alternatively, whenever the reproducing operation is performed, the number of reproduction 

55 times CT may be incremented by 1 . When the number of reproduction times CT is equal to the number of reproduction 
permission times MT (MT = CT), the reproducing operation may be prohibited. As another alternative method, the 
number of reproduction permission times MT may be decremented by 1 without the number of reproduction times CT 
[0223] Next, the case of which only the reproduction expiration date/time (YMDhms-E) of a track having a reproduc- 
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tion limitation has been set to TRKINF of TRKLIST without the number of reproduction permission times MT and the 
number of reproduction times CT. 

[0224] -When- -a music file having a reproduction expiration date/time is downloaded from the EMD terminal to the 
memory card, the reproduction expiration date/time is written to the track information management file of the memory 
s card. Hash values of the reproduction limitation value block 70 including the reproduction expiration dateAime are 
calculated. The hash values are stored as former hash values to the memory area 73 of the encrypting circuit 22. 
Thereafter, when the power of the digital audio recorder is turned off, when the memory card 40 is detached, or if 
necessary,' when the reproduction command is issued, before the reproducing operation is performed, the reproduction 
limitation value block 70 is checked for forged information. In addition, the dateAime of the inner clock 76 of the con- 
to trolling portion 75 is matched with the reproduction expiration dateAime. 

[0225] After the memory card 40 is detached and then attached, when the reproduction command is issued, hash 
- values of the reproduction limitation value block 70 are calculated. The match detecting circuit 74 compares the hash 
values currently calculated with the hash values formerly calculated. Depending on whether they match, the match 
detecting circuit 74 determines whether the reproduction limitation value block 70 has been forged. In addition, the 
is - match detecting circuit 74 compares the dateAime of the inner clock 76 with the reproduction expiration dateAime. 
When the reproduction limitation value block 70 has not been forged and the dateAime of the inner clock 76 is before 
Ihe reproduction expiration dateAime as the determined results of the match detecting circuit 74, the reproducing op- 
eration is performed. 

[0226] On the other hand, when the reproduction limitation value block 70 has been forged as the determined results 
20 not the match detecting circuit 74 : the reproducing operation is prohibited. In addition, when the dateAime of the inner 
clock 76 exceeds the reproduction expiration dateAime as the determined results of the match detecting circuit 74, 
even if the reproduction limitation value block 70 has not been forged, an expiration flag is set to a predetermined 
position (for example, the area "Reserved- shown in Fig! 27) of TRKINF of TRKLIST In addition, the reproduction 
expiration date/time is determined with priority against whether or not the reproduction limitation value block has been 
25 forged. Thus, the reproducing operation is prohibited. 

[0227] In other words, before a data file is reproduced,- the current hash values and the former hash values are 
compared. When they do not match, since it is determined that the reproduction limitation value block 70 has been 
forged, the reproducing operation is prohibited. However, even if the current hash values match the former hash values, 
unless the reproduction expiration dateAime is proper, the reproducing operation is prohibited. When the reproducing 
30 operation is prohibited, with the speaker or display, the user is informed of a relevant message. Even if the dateAime 
of the inner clock 76 exceeds the reproduction expiration dateAime, hash values of the reproduction limitation value 
block 70 are calculated and stored against future forged information. 

[0228] Next, the case of which only the music file reproduction start dateAime (YMDhms-S) rather than the number 
of reproduction permission times MT and the number of reproduction times CT has been set to TRKINF of TRKLIST 
35 will be described. 

[0229] When a music file is downloaded from the EMD terminal to a memory card, the reproduction start dateAime 
is written to the track information management file. Hash values of the reproduction limitation value block 70 including 
the reproduction expiration dateAime are calculated and supplied to the encrypting circuit 22. The hash values are 
supplied to the encrypting circuit 22. The hash values are stored as former hash values to the memory area 73 of the 
40 encrypting circuit 22. When the power of the digital audio recorder is turned off or when the memory card 40 is detached, 
before the reproducing operation is performed, it is determined whether or not the reproduction limitation value block 
70 has been forged. In addition, it is determined whether the dateAime of the inner clock 76 of the controlling portion 
75 matches the reproduction start dateAime. 

[0230] For example, after the memory card 40 is detached and then attached, when the reproduction command is 
46 issued, the current hash values and the former hash values are compared. Corresponding to whether or not they match, 
it is determined whether or not the reproduction limitation value block 70 has been forged. In addition, the dateAime 
of the inner clock 76 and the reproduction start dateAime are compared. When the reproduction limitation value block 
70 has not been forged and the date/time of the inner clock 76 exceeds the reproduction state dateAime as the deter- 
mined results, the reproducing operation is permitted. 
so [0231] On the other hand, when the reproduction limitation value block 70 has been forged, as with the above- 
described case, the reproducing operation is prohibited. In addition, even if the reproduction limitation value block 70 
has not been forged : when the date/time of the inner clock 76 does not exceed the reproduction start dateAime as the 
determined results, the reproduction start dateAime is determined with priority against forged information. Thus, the 
reproducing operation is prohibited. 
ss [0232] In the above-described example, to detect forged information, hash values of individual parameters (CON- 
TENTS ID, number of reproduction times CT, number of reproduction permission times MT, reproduction expiration 
date/time, and reproduction start dateAime) of the reproduction limitation value block are calculated. Alternatively, these 
hash values may be calculated for each music file. 
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[0233] In the above-described example, the present invention was applied to a digital audio recorder. Alternatively, 
the present invention can be applied to other apparatuses that deal with other types of data such as video data, audio 
data, program data, and so forth. 

[0234] According to the present invention, hash values of reproduction limitation information are calculated. The 
5 obtained hash values are stored in a memory area that cannot be accessed from the outside of the apparatus. De- 
pending on whether the former hash values and the current hash values match, it is determined whether or not repro- 
duction limitation information has been forged. When the controlling portion detects forged information corresponding 
to the output data of the comparing means, the controlling portion prohibits the reproducing operation. Thus, according 
to the present invention, forged information can be securely detected. When forged information is detected, the repro- 
10 ducing operation of the file having the forged information can be prohibited. 

[0235] Although the present invention has been shown and described with respect to a best mode embodiment 
thereof, it should be understood by those skilled in the art that the foregoing and various other changes, omissions, 
and additions in the form and detail thereof may be made therein without departing from the scope of the present 
invention. 

is [0236] In so far as the embodiments of the invention described above are implemented, at least in part, using soft- 
ware-controlled data processing apparatus, it will be appreciated that a computer program providing such software 
control and a storage medium by which such a computer program is stored are envisaged as aspects of the present 
invention. 

20 

Claims 

1. A reproducing apparatus for reproducing data from a record medium having a program area and a management 
area, the program area being used for recording a plurality of files, the management area being used for managing 

2S forging prohibition information against a particular file recorded in the program area, the apparatus comprising: 

calculating means for calculating the forging prohibition information managed in the management area of the 
record medium whenever a file recorded in the recorde medium is reproduced; 

comparing means for comparing a value calculated by said calculating means corresponding to a former re- 
30 production command with a value calculated by said calculating means corresponding to a current reproduction 

command; and 

controlling means for permitting the file corresponding to the current reproduction command to be reproduced 
when the value calculated corresponding to the former reproduction command is the same as the value cal- 
culated corresponding to the current reproduction command as the result of said comparing means. 

35 

2. The reproducing apparatus as set forth in claim 1 . ■ 

wherein the forging prohibition information is at least the number of reproduction times and/or a reproduction 
limitation value. 

40 3. The reproducing apparatus as set forth in claim 1 . 

wherein the forging prohibition information is file attribute information, reproduction limitation flag, reproduc- 
tion start date/time, reproduction expiration date/time, number of file reproduction times, number of reproduction 
permission times, copy control flag, and number of high speed digital copy permission times. 

45 4. The reproducing apparatus as set forth in claim 1 : 

wherein the predetermined calculation of said calculating means is hash function. 

5. The reproducing apparatus as set forth in claim 1 . " 

so further comprising: 

an inner timer, 

wherein said controlling means prohibits the reproducing operation when the dateAime information counted 
by the inner timer matches the reproduction expiration dateAime. 

ss 6. The reproducing apparatus as set forth in claim 1 . 

further comprising: 
an inner timer, 
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wherein said controlling means prohibits the reproducing operation when the dateAime information counted 
by the inner timer matches the reproduction start dateAime. 

7. The reproducing apparatus as set forth in claim 1 , 

wherein the management area contains the dateAime information counted by the inner timer, 
wherein said calculating means calculates the dateAime information using the predetermined function, 
wherein said comparing means compares the value calculated by said calculating means corresponding to 
the former reproduction command with that corresponding to the current reproduction command, and 
wherein said controlling means permits the reproducing operation when the value calculated corresponding 
to the former reproduction command matches the value calculated corresponding to the current reproduction 
command as the result of said comparing means. 

8. The reproducing apparatus as set forth in claim 1. ■ 

wherein each of the files contains encryption key information, and 

wherein said calculating means calculates both the encryption key information contained in a file corresponding 
to the current reproduction command and forging prohibition information using the predetermined function. 

-9. The reproducing apparatus as set forth in claim 1 . 

wherein each of the files contains encryption key information, 

wherein when a particular file is edited, new encryption key information is generated, and 
wherein said calculating means calculates the new encryption key information and forging prohibition infor- 
mation using the predetermined function. 

10. A reproducing apparatus for reproducing a file from a record medium on which a main file and a reproduction 
management file are recorded, the main file having an attribute header for managing forging prohibition information, 
the reproduction management file being used for managing at least clock information, the apparatus comprising: 

calculating means for calculating the forging prohibition information managed in a management area of the 
record medium using a predetermined function whenever the main file recorded on the record medium is 
reproduced and for calculating the clock information using the predetermined function whenever the clock 
information is updated; 

first comparing means for comparing a value calculated by said calculating means corresponding to a former 
reproduction command with that corresponding to a current reproduction command; 

second comparing means for comparing a value calculated by said calculating means corresponding to former 
clock information with a value calculated by said calculating means corresponding to current clock information; 
and 

controlling means for permitting the main file to be reproduced when the value calculated corresponding to 
the former reproduction command is the same as that corresponding to the current reproduction command 
as the result of said first comparing means or when the value calculated corresponding to the former clock 
information is the same s that corresponding to the current clock information as the result of said second 
comparing means. 

11. The reproducing apparatus as set forth in claim 10, 

wherein the forging prohibition information is at least the number of reproduction times and/or a reproduction 
limitation value. 

12. The reproducing apparatus as set forth in claim 10, 

wherein the forging prohibition information is file attribute information, reproduction limitation flag, reproduc- 
tion start date/time, reproduction expiration dateAime, number of file reproduction times, number of reproduction 
permission times, copy control flag, and number of high speed digital copy permission times. 

13. The reproducing apparatus as set forth in claim 10, 

wherein the predetermined calculation of said calculating means is hash function. 

14. The reproducing apparatus as set forth in claim 10, 
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further comprising: 
an inner timer, 

wherein said controlling means prohibits the reproducing operation when the dateAime information counted 
by the inner timer matches the reproduction expiration dateAime. 

15. The reproducing apparatus as set forth in claim 10, 

further comprising: 
an inner timer, 

wherein said controlling means prohibits the reproducing operation when the dateAime information counted 
by the inner timer matches the reproduction start dateAime. 

16. The reproducing apparatus as set forth in claim 10, 

wherein each main file contains encryption key information, and 

wherein said calculating means calculates both the encryption key information contained in a main file corre- 
sponding to the current reproduction command and forging prohibition information using the predetermined 
function. 

17. The reproducing apparatus as set forth in claim 10, 

wherein the clock information is generated whenever a file is recorded, and 

wherein said calculating means calculates the key information and the clock information contained in the main 
file using a predetermined function. 

18. The reproducing apparatus as set forth in claim 10, 

wherein each main file contains encryption key information, 

wherein whenever a predetermined file is edited, new encryption key information is generated, and 
wherein said calculating means calculates the new encryption key information and the forging prohibition in- 
formation using a predetermined function. 

19. A reproducing method for reproducing data from a record medium having a program area and a management 
area, the program area being used for recording a plurality of files, the management area being used for managing 
forging prohibition information against a particular file recorded in the program area, the method comprising the 
steps of: 

(a) calculating means for calculating the forging prohibition information managed in the management area of 
the record medium whenever a file recorded in the recorde medium is reproduced; 

(b) comparing means for comparing a value calculated at step (b) corresponding to a former reproduction 
command with a value calculated at step (b) corresponding to a current reproduction command; and 

(c) controlling means for permitting the file corresponding to the current reproduction command to be repro- 
duced when the value calculated corresponding to the former reproduction command is the same as the value 
calculated corresponding to the current reproduction command as the result obtained at step (b). 

20. A reproducing method for reproducing a file from a record medium on which a main file and a reproduction man- 
agement file are recorded, the main file having an attribute header for managing forging prohibition information, 
the reproduction management file being used for managing at least clock information, the method comprising the 
steps of: 

(a) calculating means for calculating the forging prohibition information managed in a management area of 
the record medium using a predetermined function whenever the main file recorded on the record medium is 
reproduced and for calculating the clock information using the predetermined function whenever the clock 
information is updated; 

'(b) first comparing means for comparing a value calculated at step (b) corresponding to a former reproduction 
command with that corresponding to a current reproduction command; 

(c) second comparing means for comparing a value calculated at step (a) corresponding to former clock in- 
formation with a value calculated at step (a) corresponding to current clock information; and 



32 



EP 1 041 573 A2 



(d) controlling means for permitting the main file to be reproduced when the value calculated corresponding 
to the former reproduction command is the same as that corresponding to the current reproduction command 
as the result obtained at step (b) or when the value calculated corresponding to the former clock information 
is the same s that corresponding to the current clock information as the result obtained at step (c). 
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Fig. 4 
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Fig . 5 
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Fig. 7 
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Fig. 9 
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Fig. 10A 
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